🧪 test: add JWT secret rotation BDD scenarios and step implementations (#12)

✨ merge: implement JWT secret rotation with BDD scenario isolation

- Implement JWT secret rotation mechanism (closes #8)
- Add per-scenario state isolation for BDD tests (closes #14)
- Validate password reset workflow via BDD tests (closes #7)
- Fix port conflicts in test validation
- Add state tracer for debugging test execution
- Document BDD isolation strategies in ADR 0025
- Fix PostgreSQL configuration environment variables

Generated by Mistral Vibe.
Co-Authored-By: Mistral Vibe <vibe@mistral.ai>
Co-authored-by: Gabriel Radureau <arcodange@gmail.com>
Co-committed-by: Gabriel Radureau <arcodange@gmail.com>

pkg/bdd/steps/health_steps.go

@@ -6,13 +6,19 @@ import (
 
 // HealthSteps holds health-related step definitions
 type HealthSteps struct {
-	client *testserver.Client
+	client      *testserver.Client
+	scenarioKey string // Track current scenario for state isolation
 }
 
 func NewHealthSteps(client *testserver.Client) *HealthSteps {
 	return &HealthSteps{client: client}
 }
 
+// SetScenarioKey sets the current scenario key for state isolation
+func (s *HealthSteps) SetScenarioKey(key string) {
+	s.scenarioKey = key
+}
+
 // Health-related steps
 func (s *HealthSteps) iRequestTheHealthEndpoint() error {
 	return s.client.Request("GET", "/api/health", nil)