fase(25-26): keyboard shortcuts, mobile responsive, enterprise SSO/audit

- Phase 25.4: N shortcut for new exploration on dashboard (react-hotkeys-hook)
- Phase 25.5: overflow-x-auto on tables, responsive padding (p-4 md:p-6)
- Phase 26: SAML/OIDC/LDAP providers (build-fixed), TOTP/MFA service
- Phase 26: KyselySSOConfigRepository + KyselyTOTPRepository
- Phase 26: SSO HTTP controller (config CRUD + MFA setup/verify/disable)
- Phase 26: Audit module index.ts + SSO module index.ts
- Phase 26: Session management endpoints (findByUserId, deleteById, list/revoke)
- Phase 26: SSO and audit routes feature-gated (auth:sso, audit:logs)
- Phase 26: Frontend SSOSection (SAML/OIDC/LDAP config + TOTP setup)
- Phase 26: Frontend SessionsSection (list/revoke active sessions)
- Phase 26: Settings navigation updated with SSO & Sessions sections

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

package.json

@@ -26,7 +26,10 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/cookie-parser": "^1.4.10",
     "@types/jest": "^29.5.0",
+    "@types/ldapjs": "^3.0.6",
     "@types/node": "^20.0.0",
+    "@types/nodemailer": "^7.0.11",
+    "@types/qrcode": "^1.5.6",
     "@types/supertest": "^7.2.0",
     "@types/uuid": "^10.0.0",
     "jest": "^29.5.0",
@@ -39,6 +42,7 @@
     "@asteasolutions/zod-to-openapi": "^8.4.3",
     "@axe-core/playwright": "^4.11.1",
     "@casl/ability": "^6.8.0",
+    "@node-saml/node-saml": "^5.1.0",
     "@octokit/rest": "^22.0.1",
     "@playwright/test": "^1.40.0",
     "@scalar/express-api-reference": "^0.8.48",
@@ -58,11 +62,16 @@
     "express-rate-limit": "^8.2.1",
     "helmet": "^8.1.0",
     "kysely": "^0.28.11",
+    "ldapjs": "^3.0.7",
     "node-cron": "^4.2.1",
+    "nodemailer": "^8.0.1",
+    "openid-client": "^6.8.2",
+    "otpauth": "^9.5.0",
     "pino": "^10.3.1",
     "pino-pretty": "^13.1.3",
     "pixelmatch": "^7.1.0",
     "playwright": "^1.40.0",
+    "qrcode": "^1.5.4",
     "recharts": "^3.7.0",
     "sharp": "^0.34.5",
     "socket.io": "^4.8.3",