Add E2E and integration tests (Group 11)

Journal tests (6):
- Home page, auth pages render correctly
- No password fields on register/login
- Protected routes redirect to login

Planner tests (9):
- Session creation via API
- Map loads in session
- Yjs WebSocket connects (Connected status)
- Profile selector, export button, waypoint sidebar
- Session with initial GPX waypoints
- Expired session returns 404

Integration tests (5):
- GPX import returns parsed waypoints
- BRouter computes Berlin routes
- Routes pass through all waypoints (segment by segment)
- Rate limit headers present
- Rejects < 2 waypoints

Total: 32 unit tests + 20 E2E tests, all passing.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

e2e/planner.test.ts

@@ -6,4 +6,80 @@ test.describe("Planner", () => {
     await expect(page).toHaveTitle("trails.cool Planner");
     await expect(page.getByText("Collaborative route planning")).toBeVisible();
   });
+
+  test("can create a session via API", async ({ request }) => {
+    const response = await request.post("/api/sessions", {
+      data: {},
+    });
+    expect(response.ok()).toBeTruthy();
+    const body = await response.json();
+    expect(body.sessionId).toBeTruthy();
+    expect(body.url).toContain("/session/");
+  });
+
+  test("session page loads with map", async ({ page, request }) => {
+    // Create session
+    const response = await request.post("/api/sessions", { data: {} });
+    const { url } = await response.json();
+
+    await page.goto(url);
+    await expect(page.getByText("trails.cool Planner")).toBeVisible();
+
+    // Wait for map to load (Leaflet container)
+    await expect(page.locator(".leaflet-container")).toBeVisible({ timeout: 10000 });
+  });
+
+  test("session shows connection status", async ({ page, request }) => {
+    const response = await request.post("/api/sessions", { data: {} });
+    const { url } = await response.json();
+
+    await page.goto(url);
+    // Should eventually show Connected
+    await expect(page.getByText("Connected")).toBeVisible({ timeout: 15000 });
+  });
+
+  test("session has profile selector", async ({ page, request }) => {
+    const response = await request.post("/api/sessions", { data: {} });
+    const { url } = await response.json();
+
+    await page.goto(url);
+    await expect(page.locator(".leaflet-container")).toBeVisible({ timeout: 10000 });
+
+    const profileSelect = page.getByLabel("Profile:");
+    await expect(profileSelect).toBeVisible();
+    await expect(profileSelect).toHaveValue("trekking");
+  });
+
+  test("session has export GPX button", async ({ page, request }) => {
+    const response = await request.post("/api/sessions", { data: {} });
+    const { url } = await response.json();
+
+    await page.goto(url);
+    await expect(page.getByRole("button", { name: "Export GPX" })).toBeVisible({ timeout: 10000 });
+  });
+
+  test("session shows empty waypoints sidebar", async ({ page, request }) => {
+    const response = await request.post("/api/sessions", { data: {} });
+    const { url } = await response.json();
+
+    await page.goto(url);
+    await expect(page.getByText("Waypoints (0)")).toBeVisible({ timeout: 10000 });
+    await expect(page.getByText("Click on the map to add waypoints")).toBeVisible();
+  });
+
+  test("can create session with initial waypoints", async ({ page, request }) => {
+    const response = await request.post("/api/sessions", {
+      data: {
+        gpx: '<?xml version="1.0"?><gpx version="1.1" xmlns="http://www.topografix.com/GPX/1/1"><wpt lat="52.52" lon="13.405"><name>Berlin</name></wpt><wpt lat="48.137" lon="11.576"><name>Munich</name></wpt></gpx>',
+      },
+    });
+    const body = await response.json();
+    expect(body.initialWaypoints).toHaveLength(2);
+    expect(body.initialWaypoints[0].name).toBe("Berlin");
+  });
+
+  test("expired session returns 404", async ({ page }) => {
+    const response = await page.goto("/session/nonexistent-id");
+    expect(response?.status()).toBe(404);
+  });
 });