chore(deps): remove unused jaeger dep + upgrade @supabase/ssr 0.10.2 (#79)

* chore(deps): remove unused @opentelemetry/exporter-jaeger devDep

Package was never imported in source code. Removing it eliminates
dead weight and closes the stale Dependabot PR #74 cleanly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore(deps): upgrade @supabase/ssr 0.9.0 → 0.10.2

Minor version bump with full lockfile regeneration.
Dependabot PR #77 had the same lockfile sync issue as #74 —
both failed npm ci due to missing transitive deps in the PR's lockfile.

Closes #77

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* ci: upgrade to Node 24 + npm 11; remove hardcoded JWT fallbacks

- node-version 22 → 24 (Node 24 LTS, latest stable)
- Add 'npm install -g npm@11' in all 3 jobs to match local dev environment
  (npm 10 vs npm 11 generate incompatible lockfiles — deduplication differs)
- Remove hardcoded Supabase demo JWT fallbacks (CWE-321); fail explicitly
  instead if supabase status does not return keys (supabase CLI ≥ v1.23
  always returns keys after supabase start succeeds)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* chore: format CLAUDE.md with prettier

CLAUDE.md was previously gitignored; now tracked, prettier check in CI
catches formatting issues.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Emiya Kiritsugu <emiyakiritsugu3@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: EmiyaKiritsugu3

.github/workflows/ci.yml

@@ -21,9 +21,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '24'
           cache: 'npm'
 
+      - name: Upgrade npm
+        run: npm install -g npm@11
+
       - name: Install dependencies
         run: npm ci
 
@@ -51,9 +54,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '24'
           cache: 'npm'
 
+      - name: Upgrade npm
+        run: npm install -g npm@11
+
       - name: Install dependencies
         run: npm ci
 
@@ -83,9 +89,12 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@v4
         with:
-          node-version: '22'
+          node-version: '24'
           cache: 'npm'
 
+      - name: Upgrade npm
+        run: npm install -g npm@11
+
       - name: Install dependencies
         run: npm ci
 
@@ -102,18 +111,13 @@ jobs:
 
       - name: Export Supabase keys
         run: |
-          # Try --output env first (Supabase CLI v1.23+); strip surrounding quotes
           STATUS_ENV=$(supabase status --output env 2>/dev/null || echo "")
           ANON_KEY=$(echo "$STATUS_ENV" | grep "^ANON_KEY=" | cut -d= -f2- | sed "s/^[\"']//; s/[\"']$//")
           SERVICE_KEY=$(echo "$STATUS_ENV" | grep "^SERVICE_ROLE_KEY=" | cut -d= -f2- | sed "s/^[\"']//; s/[\"']$//")
-          echo "Extracted anon key length: ${#ANON_KEY}"
-          echo "Extracted service key length: ${#SERVICE_KEY}"
-          # Fallback: well-known defaults when config.toml has no explicit jwt_secret
-          if [ -z "$ANON_KEY" ]; then
-            ANON_KEY="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRFA0NiK7W9odiD2okw387wrjgFjtl7gx5LwhwlM6ic"
-          fi
-          if [ -z "$SERVICE_KEY" ]; then
-            SERVICE_KEY="eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hj04zWl196z2-SBc0"
+          if [ -z "$ANON_KEY" ] || [ -z "$SERVICE_KEY" ]; then
+            echo "ERROR: Could not extract Supabase keys from 'supabase status --output env'"
+            supabase status
+            exit 1
           fi
           echo "SUPABASE_LOCAL_ANON_KEY=$ANON_KEY" >> $GITHUB_ENV
           echo "SUPABASE_LOCAL_SERVICE_ROLE_KEY=$SERVICE_KEY" >> $GITHUB_ENV

CLAUDE.md

@@ -3,6 +3,7 @@
 Auto-generated from all feature plans. Last updated: 2026-04-19
 
 ## Active Technologies
+
 - TypeScript 5 (strict mode) + Playwright 1.59, Next.js 15 App Router, Supabase local CLI (feat/006-it4-instrutor-e2e)
 - PostgreSQL via Prisma (local Supabase, ports 54321/54322) (feat/006-it4-instrutor-e2e)
 
@@ -40,13 +41,12 @@ All 4 gates must pass before merging.
 TypeScript 5 (strict mode, `useUnknownInCatchVariables` enabled): Follow standard conventions
 
 ## Recent Changes
+
 - feat/006-it4-instrutor-e2e: Added TypeScript 5 (strict mode) + Playwright 1.59, Next.js 15 App Router, Supabase local CLI
 
 - 004-elite-workflow-setup: Added TypeScript 5 (strict mode, `useUnknownInCatchVariables`) + Node.js 20 + Next.js 15 App Router, Prisma 7, Supabase SSR, Zod 3, Genkit 1.31
 - fix/telemetry-and-e2e-stability: Modernized Sentry to v10 + Next.js 15, implemented Privacy-First Replay, linked Supabase User IDs to observability, and repaired ESLint flat config.
 
-
-
 <!-- MANUAL ADDITIONS START -->
 
 ## AI Session Protocol