fix: resolve stale backend test imports and schema drift

- Delete 4 obsolete unit tests tied to removed git mount/clone models
- Update imports and assertions across unit/integration/service tests
- Fix Settings defaults (postgres host, JWT props, cookie_samesite)
- Add skip guards for PostgreSQL-dependent integration tests
- Fix GitService env assertions and HealthMonitor state-change tests
- Repair docker/container inspect assertions in test_docker_service
- Fix ToolTypeCreate default_port validator ordering bug
- Fix check_port_exposed substring false-positive for port 0
- Update test_tool_types_api_extended to use interface_type field

Quality gates: pytest 311 passed, 34 skipped; npm typecheck/lint/test 87 passed

apps/api/tests/unit/test_permission_fixer.py

@@ -4,7 +4,7 @@ from unittest.mock import MagicMock, patch
 
 import pytest
 
-from src.services.permission_fixer import (
+from src.services.shared.permission_fixer import (
     PermissionFixError,
     apply_mount_permissions,
     apply_ssh_permissions,
@@ -16,7 +16,7 @@ from src.services.permission_fixer import (
 class TestApplyMountPermissions:
     """Tests for apply_mount_permissions."""
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_applies_chown_when_owner_declared(self, mock_run) -> None:
         mounts = [
             {"name": "workspace", "target": "/workspace", "owner": "user"},
@@ -31,7 +31,7 @@ class TestApplyMountPermissions:
         assert args[0] == "abc123"
         assert args[1] == ["chown", "-R", "user:user", "/workspace"]
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_applies_chmod_when_mode_declared(self, mock_run) -> None:
         mounts = [
             {"name": "ssh", "target": "/home/user/.ssh", "mode": "0700"},
@@ -44,7 +44,7 @@ class TestApplyMountPermissions:
         chmod_call = mock_run.call_args_list[0]
         assert chmod_call[0][1] == ["chmod", "0700", "/home/user/.ssh"]
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_applies_file_mode_when_declared(self, mock_run) -> None:
         mounts = [
             {
@@ -64,7 +64,7 @@ class TestApplyMountPermissions:
             "find /home/user/.ssh -type f -exec chmod 0600" in file_mode_call[0][1][2]
         )
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_skips_readonly_mount(self, mock_run) -> None:
         mounts = [
             {
@@ -82,7 +82,7 @@ class TestApplyMountPermissions:
         assert results[0]["success"] is True
         mock_run.assert_not_called()
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_skips_mount_with_no_policy(self, mock_run) -> None:
         mounts = [
             {"name": "workspace", "target": "/workspace", "writable": True},
@@ -93,7 +93,7 @@ class TestApplyMountPermissions:
         assert results[0]["success"] is True
         mock_run.assert_not_called()
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_reports_failure_on_command_error(self, mock_run) -> None:
         mock_run.side_effect = PermissionFixError("chown failed")
 
@@ -105,7 +105,7 @@ class TestApplyMountPermissions:
         assert results[0]["success"] is False
         assert "chown failed" in results[0]["error"]
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_stops_on_first_failure(self, mock_run) -> None:
         """If chown fails, chmod and file_mode should not run."""
         mock_run.side_effect = PermissionFixError("chown failed")
@@ -227,11 +227,11 @@ class TestApplySshPermissions:
 class TestCheckRootUserAvailable:
     """Tests for check_root_user_available."""
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_returns_true_when_root_exists(self, mock_run) -> None:
         assert check_root_user_available("abc123") is True
 
-    @patch("src.services.permission_fixer._run_in_container")
+    @patch("src.services.shared.permission_fixer._run_in_container")
     def test_returns_false_when_root_missing(self, mock_run) -> None:
         mock_run.side_effect = PermissionFixError("no such user")
         assert check_root_user_available("abc123") is False