Replace argon2id-per-row session lookup with sha256 indexed lookup #286

	name: CI

	on:
	push:
	branches: [main]
	pull_request:

	jobs:
	ci:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v6
	- name: Install dependencies
	run: ./bun install
	# web-assets.generated.ts is produced by `build:web` and is gitignored.
	# Lint/typecheck/tests transitively import it through packages/cli/serve/.
	# Running the bundler alone (no Vite) is enough for CI — it emits an
	# empty map when packages/web/dist/ is absent, which satisfies the type
	# shape without the multi-second Vite build.
	- name: Prepare embedded web assets (stub)
	run: ./bun scripts/bundle-web-assets.ts
	- name: Lint
	run: ./bun run lint
	- name: Typecheck
	run: ./bun run typecheck
	- name: Test (unit)
	run: find packages -name '.test.ts' ! -name '.integration.test.ts' -print0 \| xargs -0 ./bun test

	integration:
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v6
	- name: Install dependencies
	run: ./bun install
	- name: Prepare embedded web assets (stub)
	run: ./bun scripts/bundle-web-assets.ts
	- name: Build Postgres image
	run: docker build -t me-postgres -f docker/Dockerfile.postgres docker/
	- name: Start Postgres
	run: \|
	docker run --rm -d --name me-postgres \
	-e POSTGRES_HOST_AUTH_METHOD=trust \
	-p 127.0.0.1:5432:5432 \
	me-postgres
	- name: Wait for Postgres
	run: \|
	for i in $(seq 1 30); do
	pg_isready -h 127.0.0.1 -p 5432 -U postgres && break
	sleep 1
	done
	- name: Test (integration)
	run: find packages -name '*.integration.test.ts' -print0 \| xargs -0 ./bun test
	- name: Stop Postgres
	run: docker stop me-postgres

Provide feedback