fase(25-26): keyboard shortcuts, mobile responsive, enterprise SSO/audit

- Phase 25.4: N shortcut for new exploration on dashboard (react-hotkeys-hook)
- Phase 25.5: overflow-x-auto on tables, responsive padding (p-4 md:p-6)
- Phase 26: SAML/OIDC/LDAP providers (build-fixed), TOTP/MFA service
- Phase 26: KyselySSOConfigRepository + KyselyTOTPRepository
- Phase 26: SSO HTTP controller (config CRUD + MFA setup/verify/disable)
- Phase 26: Audit module index.ts + SSO module index.ts
- Phase 26: Session management endpoints (findByUserId, deleteById, list/revoke)
- Phase 26: SSO and audit routes feature-gated (auth:sso, audit:logs)
- Phase 26: Frontend SSOSection (SAML/OIDC/LDAP config + TOTP setup)
- Phase 26: Frontend SessionsSection (list/revoke active sessions)
- Phase 26: Settings navigation updated with SSO & Sessions sections

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tests/modules/auth.test.ts

@@ -61,6 +61,12 @@ class InMemorySessionRepository implements ISessionRepository {
       if (session.expiresAt < now) this.store.delete(token);
     }
   }
+  async findByUserId(userId: string): Promise<AuthSession[]> {
+    return Array.from(this.store.values()).filter(s => s.userId === userId);
+  }
+  async deleteById(id: string): Promise<void> {
+    for (const [token, s] of this.store) { if (s.id === id) { this.store.delete(token); break; } }
+  }
 }
 
 // ─── Tests: Email Value Object ─────────────────────────────────────────────────