feat: add comprehensive E2E test suite (Playwright + WireGuard + API)

Adds tests/e2e/ with three layers of E2E coverage:
- API layer (tests/e2e/api/): unauthenticated access, admin endpoints,
  peer endpoints, access control enforcement — 24 tests
- Playwright UI (tests/e2e/ui/): login flows, admin navigation, peer
  dashboard/services, role-based ACL, password change — 60+ tests
- WireGuard connectivity (tests/e2e/wg/): tunnel up/down, DNS resolution
  through VPN, service ACL enforcement via iptables, full-tunnel routing
Shared helpers: PicAPIClient, WGInterface, playwright_login, cleanup.
Makefile targets: test-e2e-api, test-e2e-ui, test-e2e-wg, test-e2e.
Adds scripts/reset_admin_password.py for test bootstrap.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

api/requirements.txt

@@ -1,16 +1,17 @@
-flask>=3.0.3
-flask-cors>=4.0.1
-requests>=2.32.3
-cryptography>=42.0.5
-pyyaml==6.0.1
-icalendar==5.0.7
-vobject==0.9.6.1
-python-dotenv==1.0.0
-wireguard-tools==0.4.3
-
-# Testing dependencies
-pytest==7.4.3
-pytest-cov==4.1.0
-pytest-mock==3.12.0 
-
+flask>=3.0.3
+flask-cors>=4.0.1
+requests>=2.32.3
+cryptography>=42.0.5
+pyyaml==6.0.1
+icalendar==5.0.7
+vobject==0.9.6.1
+python-dotenv==1.0.0
+wireguard-tools==0.4.3
+bcrypt>=4.0.1
+
+# Testing dependencies
+pytest==7.4.3
+pytest-cov==4.1.0
+pytest-mock==3.12.0 
+
 docker>=7.0.0