Expand e2e auth coverage, Vitest CI, and shared URL defaults

Wire viewer-frontend Vitest into Gitea Actions, centralize DEV base URLs
in env-defaults.json, expand playkit API catalog specs, and land auth/mail
flows plus verify-email public-host redirect and idle-logout e2e hooks.

e2e/.env.example

@@ -1,17 +1,22 @@
-# Public UI (required for host-guard tests)
-PLAYKIT_BASE_URL=https://punimtagdev.levkin.ca
+# Defaults also live in env-defaults.json — override here for local runs.
+# PLAYKIT_BASE_URL / PLAYKIT_API_BASE_URL fall back to that file when unset.
+
 PLAYKIT_PROJECT=punimtag
 PLAYKIT_ENV=dev
 
-# FastAPI on the DEV LXC (runners on LAN can reach this)
-PLAYKIT_API_BASE_URL=http://10.0.10.121:8000
-
 # Dedicated e2e user — never commit real passwords
 E2E_ADMIN_EMAIL=
 E2E_ADMIN_PASSWORD=
 
-# Mailtrap Email Testing (optional — forgot-password specs skip if unset)
+# Homelab Mailpit (preferred for DEV e2e)
+PLAYKIT_MAIL_PROVIDER=mailpit
+MAILPIT_BASE_URL=http://10.0.10.45:8025
+MAILPIT_USER=
+MAILPIT_PASSWORD=
+# E2E_MAIL_TO=   # defaults to E2E_ADMIN_EMAIL
+
+# Mailtrap Email Testing (optional SaaS fallback)
+# PLAYKIT_MAIL_PROVIDER=mailtrap
 # MAILTRAP_API_TOKEN=
 # MAILTRAP_ACCOUNT_ID=
 # MAILTRAP_INBOX_ID=
-# E2E_MAIL_TO=   # defaults to E2E_ADMIN_EMAIL