fix(tests): resolve password validation, csv upload, and admin auth issues

- Set explicit min/max password length in Better Auth config (8-128 chars)
- Fix CSV upload tests to use multipart/form-data instead of data
- Add @chromium-admin annotations to tests requiring admin access

e2e/csv-upload-deduplication.test.ts

@@ -79,7 +79,7 @@ test.describe('CSV Upload Player Deduplication', () => {
       formData.append('eventId', testTournamentId.toString());
 
       const response = await request.post('http://localhost:3000/api/matches/upload', {
-        data: formData,
+        multipart: formData,
       });
 
       expect(response.ok()).toBeTruthy();
@@ -133,7 +133,7 @@ test.describe('CSV Upload Player Deduplication', () => {
       formData.append('eventId', testTournamentId.toString());
 
       const response = await request.post('http://localhost:3000/api/matches/upload', {
-        data: formData,
+        multipart: formData,
       });
 
       expect(response.ok()).toBeTruthy();
@@ -190,7 +190,7 @@ test.describe('CSV Upload Player Deduplication', () => {
       formData.append('eventId', testTournamentId.toString());
 
       const response = await request.post('http://localhost:3000/api/matches/upload', {
-        data: formData,
+        multipart: formData,
       });
 
       expect(response.ok()).toBeTruthy();