Expand e2e auth coverage, Vitest CI, and shared URL defaults

Wire viewer-frontend Vitest into Gitea Actions, centralize DEV base URLs
in env-defaults.json, expand playkit API catalog specs, and land auth/mail
flows plus verify-email public-host redirect and idle-logout e2e hooks.

e2e/package-lock.json

@@ -8,7 +8,7 @@
       "name": "punimtag-e2e",
       "version": "1.0.0",
       "devDependencies": {
-        "@levkin/playkit": "git+https://git.levkin.ca/ilia/playkit.git#v0.2.0",
+        "@levkin/playkit": "git+https://git.levkin.ca/ilia/playkit.git#v0.2.1",
         "@playwright/test": "^1.52.0",
         "@types/node": "^22.15.0",
         "typescript": "^5.8.0"
@@ -18,8 +18,8 @@
       }
     },
     "node_modules/@levkin/playkit": {
-      "version": "0.2.0",
-      "resolved": "git+https://git.levkin.ca/ilia/playkit.git#2f3991dadc172aae86b98538eb5654cdb3237e67",
+      "version": "0.2.1",
+      "resolved": "git+https://git.levkin.ca/ilia/playkit.git#a52fe8937217a1a6fbe539d89d66b739b5fac607",
       "dev": true,
       "license": "MIT",
       "engines": {