refactor: reorganize test suite, add integration tests for NAT filter

- Move integration tests (api, network, phase2, smoke) to tests/integration/
- Move Playwright specs (captive-portal, interop-happy-path) to tests/e2e/
- Move playwright.config.mjs to tests/e2e/
- Fix hardcoded IP fallbacks: 192.168.4.1 → 10.192.45.1
- Add test-reset-auth.mjs: reset→pay→allow→revoke→block cycle
- Add test-session-expiry.mjs: pay→wait 65s→verify blocked (slow test)
- Add test-dns-firewall.mjs: DNS hijack/forward + per-client NAT filter
- Update Makefile with test-unit, test-integration, test-e2e, test-all targets
- Update package.json scripts for new paths
- Fix Playwright video: retain-on-failure instead of always-on
- Update AGENTS.md: per-client NAT filter description
- Update CHECKLIST.md: mark completed items, add Board B identity
- Board B nsec: 9af47906... → SSID TollGate-b96d80, AP IP 10.185.47.1
- 186 unit tests passing

1 files changed, 12 insertions, 8 deletions

diff --git a/package.json b/package.json
index dd61cd9..fe1daee 100644
--- a/package.json
+++ b/package.json
@@ -3,14 +3,18 @@
   "version": "1.0.0",
   "private": true,
   "scripts": {
-    "test": "node tests/api.mjs && node tests/network.mjs",
-    "test:api": "node tests/api.mjs",
-    "test:network": "node tests/network.mjs",
-    "test:portal": "npx playwright test tests/captive-portal.spec.mjs",
-    "test:happy-path": "npx playwright test tests/interop-happy-path.spec.mjs",
-    "test:interop": "npx playwright test tests/interop-esp32-openwrt.spec.mjs",
-    "test:smoke": "node tests/smoke.mjs",
-    "test:playwright": "npx playwright test"
+    "test": "node tests/integration/api.mjs && node tests/integration/network.mjs",
+    "test:api": "node tests/integration/api.mjs",
+    "test:network": "node tests/integration/network.mjs",
+    "test:smoke": "node tests/integration/smoke.mjs",
+    "test:payment": "node tests/integration/phase2.mjs",
+    "test:reset-auth": "node tests/integration/test-reset-auth.mjs",
+    "test:session-expiry": "node tests/integration/test-session-expiry.mjs",
+    "test:dns-firewall": "node tests/integration/test-dns-firewall.mjs",
+    "test:portal": "npx playwright test -c tests/e2e/playwright.config.mjs captive-portal.spec.mjs",
+    "test:happy-path": "npx playwright test -c tests/e2e/playwright.config.mjs interop-happy-path.spec.mjs",
+    "test:e2e": "npx playwright test -c tests/e2e/playwright.config.mjs",
+    "test:playwright": "npx playwright test -c tests/e2e/playwright.config.mjs"
   },
   "devDependencies": {
     "@playwright/test": "^1.52.0"