fix(tests): add bcrypt to pyproject.toml and fix E2E auth bypass

Fixed two test failures:

1. GitHub CI: Added bcrypt>=4.0 to pyproject.toml dependencies
   (was only in requirements.txt, but CI uses pyproject.toml)

2. E2E Tests: Extended auth middleware to detect E2E test environment
   - Added SCIDK_E2E_TEST env var in global-setup.ts
   - Updated auth_middleware.py to skip auth when SCIDK_E2E_TEST is set
   - E2E tests run Flask in subprocess, so pytest detection doesn't work

This allows E2E tests to run without authentication unless PYTEST_TEST_AUTH
is explicitly set (for auth-specific E2E tests).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: patchmemory

e2e/global-setup.ts

@@ -25,7 +25,12 @@ let proc: ChildProcessWithoutNullStreams | null = null;
 
 export default async function globalSetup(config: FullConfig) {
   const port = 5010 + Math.floor(Math.random() * 500);
-  const env = { ...process.env, PORT: String(port), FLASK_ENV: 'development' };
+  const env = {
+    ...process.env,
+    PORT: String(port),
+    FLASK_ENV: 'development',
+    SCIDK_E2E_TEST: '1'  // Disable auth for E2E tests
+  };
 
   // Prefer running the Flask app directly via Python to avoid Flask CLI dependency
   const pyCode = [

pyproject.toml

@@ -21,6 +21,7 @@ dependencies = [
   "jsonpath-ng>=1.6",
   "pandas>=2.0",
   "rapidfuzz>=3.0",
+  "bcrypt>=4.0",
 ]
 
 [project.optional-dependencies]

scidk/web/auth_middleware.py

@@ -50,10 +50,14 @@ def check_auth():
         None if authentication passes, redirect Response if not authenticated
     """
     # Skip auth check in testing mode (unless specifically testing auth)
-    # Check both TESTING config and if we're running under pytest
+    # Check both TESTING config and if we're running under pytest or E2E tests
     import os
     import sys
-    is_testing = current_app.config.get('TESTING', False) or 'pytest' in sys.modules
+    is_testing = (
+        current_app.config.get('TESTING', False) or
+        'pytest' in sys.modules or
+        os.environ.get('SCIDK_E2E_TEST')
+    )
     if is_testing:
         # Only enforce auth in tests that explicitly enable it
         if not os.environ.get('PYTEST_TEST_AUTH'):