Cover all 12 methods: constructor, password hashing, authenticate_user, create_access_token, verify_token, get_current_user, RBAC decorators, and create_default_admin_user. Achieves 96.45% coverage on auth.py. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>