Add API integration tests for auth, tasks, permissions, validation

[Assembler-Fourier]

Part of the Proof v1 hiring-profile roadmap. Keep claims honest: only update CV/website once this is implemented, tested, documented, and visible.