main
fix: harden error handling, eliminate test noise, fix lint errors
Auth improvements: shared passwordSchema, email normalization, alphanumeric reset codes
fix: standardize API error handling, fix analytics fetch bugs