RHL-005-fix(tests): update SESSION_SECRET to meet environment policy requirements

lib/auth/session.test.js

@@ -41,7 +41,8 @@ import { __cookieStore } from "next/headers";
 describe("auth session utilities", () => {
 	beforeEach(() => {
 		__cookieStore.clear();
-		process.env.SESSION_SECRET = "test-session-secret";
+		// Align tests with env policy: strong secret (>= 32 chars)
+		process.env.SESSION_SECRET = "x".repeat(64);
 		process.env.NODE_ENV = "test";
 	});