test(mfa): end-to-end coverage, OpenAPI and documentation

web/playwright.config.ts

@@ -0,0 +1,35 @@
+import { defineConfig, devices } from "@playwright/test";
+
+/**
+ * Minimal Playwright setup for the MFA end-to-end coverage (Task 15).
+ *
+ * There was no Playwright config in this repository before this task, so
+ * this is the smallest one that works: one project (Chromium, the only
+ * browser that implements the WebAuthn virtual authenticator CDP domain the
+ * passkey tests need), pointed at an already-running stack.
+ *
+ * Prerequisites (not started by this config - the stack needs MongoDB and
+ * Redis, which `webServer` cannot provision):
+ *   docker compose -f ../deploy/docker/docker-compose.yml up -d
+ *   npm run dev   # or the built `server`/`web`, whichever is already running
+ *
+ * Run with: npx playwright test e2e/mfa.spec.ts
+ */
+export default defineConfig({
+    testDir: "./e2e",
+    fullyParallel: false,
+    forbidOnly: !!process.env.CI,
+    retries: 0,
+    workers: 1,
+    reporter: "list",
+    use: {
+        baseURL: process.env.E2E_BASE_URL ?? "http://localhost:3000",
+        trace: "retain-on-failure",
+    },
+    projects: [
+        {
+            name: "chromium",
+            use: { ...devices["Desktop Chrome"] },
+        },
+    ],
+});