Tests pass under heavy host load (closes #233)

vitest runs at most four workers instead of one per core; minWorkers is
set to 1 because vitest 2 rejects a maxWorkers below its default
minWorkers. test/cli/bin.test.ts compiles the sources bin/quak.ts imports
and starts libsodium once, before its tests run. The fake accounts in
test/ente-server.ts and test/thumbnails/thumbnails.test.ts use
libsodium's lowest Argon2id cost, since each login runs the KDF again.

Model: opus-5-5

vitest.config.ts

@@ -3,8 +3,15 @@ import { configDefaults, defineConfig } from "vitest/config";
 // vitest does not read .gitignore when looking for tests. A checkout nested
 // under .claude/ has its own test/ tree, and without this exclude the suite
 // runs once per nested checkout and still reports success.
+//
+// vitest starts one worker per CPU core by default, and a shared host has
+// dozens. Four keep the suite well inside the Dockerfile's time limit. vitest
+// 2 rejects a maxWorkers below its default minWorkers, so minWorkers is set
+// too.
 export default defineConfig({
     test: {
         exclude: [...configDefaults.exclude, ".claude/**"],
+        minWorkers: 1,
+        maxWorkers: 4,
     },
 });