Update snapshots and .well-known handling

nginx.conf

@@ -108,7 +108,12 @@ http {
             try_files $uri $uri/ /index.html;
         }
 
-        # Deny access to hidden files (.git, .env, etc.)
+        # Allow .well-known (security.txt, ACME challenge, etc.)
+        location ^~ /.well-known/ {
+            add_header Cache-Control "public, max-age=86400";
+        }
+
+        # Deny access to other hidden files (.git, .env, etc.)
         location ~ /\. {
             deny all;
             access_log off;

playwright.config.ts

@@ -2,6 +2,7 @@ import { defineConfig, devices } from '@playwright/test';
 
 export default defineConfig({
     testDir: 'tests',
+    testMatch: /.*\.spec\.(ts|js)/,
     fullyParallel: true,
     forbidOnly: !!process.env.CI,
     retries: process.env.CI ? 2 : 0,