refactor: form-core wiring, JWT sessions, slowapi, packaging, frontend rewrite, test declutter

backend/tests/test_models.py

@@ -8,6 +8,9 @@ from app.models import ApprovalTask, FlowDefinition, FlowRun, FlowVersion
 
 
 def test_flow_definition_defaults(session):
+    from datetime import UTC, datetime
+
+    before = datetime.now(UTC).replace(tzinfo=None)
     d = FlowDefinition(name="bauvorhaben")
     session.add(d)
     session.commit()
@@ -18,7 +21,8 @@ def test_flow_definition_defaults(session):
     assert d.created_at is not None
     # Timestamps are written as UTC. SQLite does not round-trip tzinfo, so
     # after a refresh the value is calendar-time UTC without tzinfo.
-    assert d.created_at.year >= 2026
+    assert d.created_at.tzinfo is None
+    assert abs((d.created_at - before).total_seconds()) < 60
 
 
 def test_flow_definition_name_unique(session):