feat: publish Gamertan Web Foundations preview source

Export the reviewed application-neutral package set through the exact public allowlist. Development history and private application evidence remain outside this canonical source root.

Developed with material AI assistance under maintainer review.

Signed-off-by: Cole Speelman <crspeelman@gmail.com>

auth/password_test.go

@@ -0,0 +1,33 @@
+// SPDX-License-Identifier: MPL-2.0
+
+package auth
+
+import (
+	"errors"
+	"strings"
+	"testing"
+)
+
+func TestPasswordRoundTripAndBounds(t *testing.T) {
+	hash, err := HashPasswordWithRandom("correct horse battery staple", strings.NewReader(strings.Repeat("s", 16)))
+	if err != nil {
+		t.Fatal(err)
+	}
+	if !VerifyPassword(hash, "correct horse battery staple") || VerifyPassword(hash, "wrong password") {
+		t.Fatal("password verification mismatch")
+	}
+	if err = ValidatePassword("short"); err == nil {
+		t.Fatal("short password accepted")
+	}
+}
+
+func TestPasswordEntropyFailsClosed(t *testing.T) {
+	_, err := HashPasswordWithRandom("correct horse battery staple", errorReader{})
+	if err == nil {
+		t.Fatal("entropy failure accepted")
+	}
+}
+
+type errorReader struct{}
+
+func (errorReader) Read([]byte) (int, error) { return 0, errors.New("no entropy") }