feat: Add build scripts and runtime config support

Backend:
- Add setup-backend.sh/bat for one-click backend setup
- Fix test_auth.py mock settings (JWT_EXPIRE_HOURS)
- Fix test_excel_export.py TEMPLATE_DIR reference

Frontend:
- Add config.json for runtime API URL configuration
- Add init.js and settings.js for config loading
- Update main.js to load config from external file
- Update api.js to use dynamic API_BASE_URL
- Update all pages to initialize config before API calls
- Update package.json with extraResources for config

Build:
- Add build-client.sh/bat for packaging Electron + Sidecar
- Add build-all.ps1 PowerShell script with -ApiUrl parameter
- Add GitHub Actions workflow for Windows builds
- Add scripts/README.md documentation

This allows IT to configure backend URL without rebuilding.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

backend/tests/test_auth.py

@@ -29,6 +29,7 @@ class TestAdminRoleDetection:
     def test_create_token_includes_role(self, mock_settings):
         """Test that created tokens include the role."""
         mock_settings.JWT_SECRET = "test-secret"
+        mock_settings.JWT_EXPIRE_HOURS = 24
         mock_settings.ADMIN_EMAIL = "admin@test.com"
 
         from app.routers.auth import create_token
@@ -51,6 +52,7 @@ class TestTokenValidation:
     def test_decode_valid_token(self, mock_settings):
         """Test decoding a valid token."""
         mock_settings.JWT_SECRET = "test-secret"
+        mock_settings.JWT_EXPIRE_HOURS = 24
 
         from app.routers.auth import create_token, decode_token
 
@@ -93,10 +95,11 @@ class TestLoginEndpoint:
         mock_settings.AUTH_API_URL = "https://auth.test.com/login"
         mock_settings.ADMIN_EMAIL = "admin@test.com"
         mock_settings.JWT_SECRET = "test-secret"
+        mock_settings.JWT_EXPIRE_HOURS = 24
 
         mock_response = MagicMock()
         mock_response.status_code = 200
-        mock_response.json.return_value = {"token": "external-token"}
+        mock_response.json.return_value = {"token": "external-token", "success": True}
 
         mock_client = AsyncMock()
         mock_client.post.return_value = mock_response
@@ -120,9 +123,11 @@ class TestLoginEndpoint:
         mock_settings.AUTH_API_URL = "https://auth.test.com/login"
         mock_settings.ADMIN_EMAIL = "admin@test.com"
         mock_settings.JWT_SECRET = "test-secret"
+        mock_settings.JWT_EXPIRE_HOURS = 24
 
         mock_response = MagicMock()
         mock_response.status_code = 200
+        mock_response.json.return_value = {"token": "external-token", "success": True}
 
         mock_client = AsyncMock()
         mock_client.post.return_value = mock_response

backend/tests/test_excel_export.py

@@ -7,7 +7,11 @@ from openpyxl import load_workbook
 # Add parent directory to path
 sys.path.insert(0, os.path.dirname(os.path.dirname(os.path.abspath(__file__))))
 
-from app.routers.export import fill_template_workbook, create_default_workbook, TEMPLATE_DIR, RECORD_DIR
+from app.routers.export import fill_template_workbook, create_default_workbook, BASE_DIR
+from app.config import settings
+
+TEMPLATE_DIR = settings.get_template_dir(BASE_DIR)
+RECORD_DIR = settings.get_record_dir(BASE_DIR)
 
 
 def test_excel_export():