✅ test(auth): update tests for minimal JWT claims architecture

- Update auth.controller.spec.ts to expect accessToken/refreshToken/expiresIn
- Refactor jwt-validation.spec.ts to test minimal claims (sub, email, role, sid)
- Remove B2B/B2C org and credit_balance claims from tests (fetched via API now)
- Add Better Auth CLI config for schema generation

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

services/mana-core-auth/auth.ts

@@ -0,0 +1,26 @@
+/**
+ * Better Auth CLI configuration file
+ * This file is used by the Better Auth CLI to generate the schema.
+ * Run: npx @better-auth/cli generate --output ./src/db/schema/better-auth-schema.ts
+ */
+
+import { betterAuth } from 'better-auth';
+import { organization } from 'better-auth/plugins/organization';
+import { jwt } from 'better-auth/plugins/jwt';
+
+export const auth = betterAuth({
+	// Use simple URL-based connection for CLI
+	database: {
+		type: 'postgres',
+		url: 'postgresql://manacore:devpassword@localhost:5432/manacore',
+	},
+	emailAndPassword: {
+		enabled: true,
+	},
+	plugins: [
+		organization({
+			allowUserToCreateOrganization: true,
+		}),
+		jwt(),
+	],
+});

services/mana-core-auth/src/auth/auth.controller.spec.ts

@@ -167,7 +167,9 @@ describe('AuthController', () => {
 					name: 'Test User',
 					role: 'user',
 				},
-				token: 'jwt-access-token',
+				accessToken: 'jwt-access-token',
+				refreshToken: 'session-refresh-token',
+				expiresIn: 900,
 			};
 
 			betterAuthService.signIn.mockResolvedValue(expectedResult);
@@ -193,7 +195,9 @@ describe('AuthController', () => {
 
 			betterAuthService.signIn.mockResolvedValue({
 				user: { id: '123', email: 'user@example.com', name: 'Test', role: 'user' },
-				token: 'token',
+				accessToken: 'jwt-token',
+				refreshToken: 'refresh-token',
+				expiresIn: 900,
 			});
 
 			await controller.login(loginDto);