merge: worktree-a11y-fixes into main

Accessibility fixes (aria-labels, color contrast, html lang, inline link
underlines), atomic dev login endpoints, and E2E test hardening.

server/api/dev/member-login.get.js

@@ -34,7 +34,7 @@ export default defineEventHandler(async (event) => {
 
   const config = useRuntimeConfig(event);
   const token = jwt.sign(
-    { memberId: member._id, email: member.email, tv: member.tokenVersion },
+    { memberId: member._id, email: member.email, tv: member.tokenVersion || 0 },
     config.jwtSecret,
     { expiresIn: "7d" },
   );
@@ -43,6 +43,7 @@ export default defineEventHandler(async (event) => {
     httpOnly: true,
     secure: false,
     sameSite: "lax",
+    path: "/",
     maxAge: 60 * 60 * 24 * 7,
   });