fdfc45f1c9
Two CI bugs the M0.2 ci-typescript.yaml template carried into portal:
1. 'pnpm test --coverage' is parsed as a pnpm option, not script args
('Unknown option: coverage'). Drop the extra flag; the package.json
test script already runs 'vitest run --coverage'.
2. 'next build' requires AUTH_SECRET at compile time because Auth.js
v5 reads it during route generation. Inject a per-build dummy
secret in CI (production gets the real one via Orca env from
Infisical).
Refs: M5.1