v0.1.0 — initialer Sprint, vollständige Auth-Reise als SwiftUI

Phase 2 aus dem Native-Auth-Vollausbau-Plan (Option A, siehe
../mana/docs/MANA_SWIFT.md). Entstanden weil drei Apps fast-
byte-identische LoginView.swift hatten und Sign-Up/Forgot-PW
komplett fehlten.

ManaAuthUI-Library mit:
- ManaBrandConfig — App-injizierte Theme-Werte (forest für Cards/
  Manaspur, mana-default für Memoro), Environment-Key, View-Modifier
- Base-Components: ManaAuthScaffold, ManaPrimaryButton, ManaTextField,
  ManaSecureField + .manaEmailField()-Modifier
- ManaLoginView + LoginViewModel — Email/PW-Login, schaltet bei
  AuthError.emailNotVerified automatisch auf ManaEmailVerifyGateView
- ManaSignUpView + SignUpViewModel — Email/Name/PW + awaiting-
  Verification-Hinweis-Screen
- ManaEmailVerifyGateView + ViewModel — Resend-Verification
- ManaForgotPasswordView + ViewModel — Reset-Mail anfordern (immer
  generischer Hinweis, User-Enumeration-Schutz)
- ManaResetPasswordView + ViewModel — neues PW mit Token aus
  Universal-Link
- ManaChangeEmailView, ManaChangePasswordView, ManaDeleteAccountView
  + internal ViewModels — Account-Bausteine
- ManaDeleteAccountView ist zweistufig (Bestätigungs-Wort tippen
  + Passwort) → App-Store-Guideline 5.1.1(v) Pflicht-Surface

26/26 ViewModel-Tests grün via per-test-ID URLProtocol-Routing
(löst Parallel-Pollution zwischen .serialized Suites).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Tests/ManaAuthUITests/SignUpViewModelTests.swift

@@ -0,0 +1,96 @@
+import Foundation
+import ManaCore
+import Testing
+@testable import ManaAuthUI
+
+@Suite("SignUpViewModel")
+@MainActor
+struct SignUpViewModelTests {
+    @Test("Registrierung ohne Tokens → awaitingVerification")
+    func awaitsVerification() async {
+        let mocked = makeMockedAuth()
+        let model = SignUpViewModel(auth: mocked.auth)
+        model.email = "new@x.de"
+        model.password = "Aa-123456789"
+
+        mocked.setHandler { _ in
+            (200, Data(#"{"user":{"id":"u1","email":"new@x.de"}}"#.utf8))
+        }
+
+        await model.submit()
+        if case let .awaitingVerification(email) = model.status {
+            #expect(email == "new@x.de")
+        } else {
+            Issue.record("Expected .awaitingVerification, got \(model.status)")
+        }
+        #expect(model.password == "")
+    }
+
+    @Test("Registrierung mit Tokens → signedIn")
+    func registersAndSignsIn() async {
+        let mocked = makeMockedAuth()
+        let model = SignUpViewModel(auth: mocked.auth)
+        model.email = "new@x.de"
+        model.password = "Aa-123456789"
+
+        let access = "eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1MSIsImV4cCI6MjAwMDAwMDAwMH0.sig"
+        mocked.setHandler { _ in
+            (200, Data(#"""
+            {"user":{"id":"u1","email":"new@x.de"},"accessToken":"\#(access)","refreshToken":"r"}
+            """#.utf8))
+        }
+
+        await model.submit()
+        #expect(model.status == .signedIn)
+    }
+
+    @Test("Email-Konflikt liefert lokalisierte Fehlermeldung")
+    func emailConflict() async {
+        let mocked = makeMockedAuth()
+        let model = SignUpViewModel(auth: mocked.auth)
+        model.email = "old@x.de"
+        model.password = "Aa-123456789"
+
+        mocked.setHandler { _ in
+            (409, Data(#"{"error":"EMAIL_ALREADY_REGISTERED","status":409}"#.utf8))
+        }
+
+        await model.submit()
+        if case let .error(message) = model.status {
+            #expect(message == "Diese Email ist bereits registriert.")
+        } else {
+            Issue.record("Expected .error, got \(model.status)")
+        }
+    }
+
+    @Test("passwordHint warnt bei zu kurzem Passwort")
+    func passwordHint() {
+        let model = SignUpViewModel(auth: makeMockedAuth().auth)
+        model.password = ""
+        #expect(model.passwordHint == nil)
+        model.password = "kurz"
+        #expect(model.passwordHint == "Passwort muss mindestens 8 Zeichen lang sein.")
+        model.password = "lang-genug"
+        #expect(model.passwordHint == nil)
+    }
+
+    @Test("submit mit zu kurzem Passwort macht keinen Server-Call")
+    func submitGuardsShortPassword() async {
+        let mocked = makeMockedAuth()
+        let model = SignUpViewModel(auth: mocked.auth)
+        model.email = "u@x.de"
+        model.password = "kurz"
+
+        mocked.setHandler { _ in
+            Issue.record("Server darf nicht aufgerufen werden")
+            return (500, Data())
+        }
+
+        await model.submit()
+        if case let .error(message) = model.status {
+            #expect(message == "Passwort muss mindestens 8 Zeichen lang sein.")
+        } else {
+            Issue.record("Expected .error, got \(model.status)")
+        }
+    }
+}