extract auth test fakes

backend/tests/Fakes/FakeClock.php

@@ -0,0 +1,15 @@
+<?php
+
+namespace Tests\Fakes;
+
+use App\Auth\Clock;
+use DateTimeImmutable;
+use DateTimeZone;
+
+class FakeClock implements Clock
+{
+    public function now(): DateTimeImmutable
+    {
+        return new DateTimeImmutable('2026-05-18 12:00:00', new DateTimeZone('UTC'));
+    }
+}

backend/tests/Fakes/FakeHasher.php

@@ -0,0 +1,18 @@
+<?php
+
+namespace Tests\Fakes;
+
+use App\Auth\PasswordHasher;
+
+class FakeHasher implements PasswordHasher
+{
+    public function hash(string $password): string
+    {
+        return 'hashed-' . $password;
+    }
+
+    public function verify(string $password, string $hash): bool
+    {
+        return $hash === 'hashed-' . $password;
+    }
+}

backend/tests/Fakes/FakeTokenGenerator.php

@@ -0,0 +1,13 @@
+<?php
+
+namespace Tests\Fakes;
+
+use App\Auth\TokenGenerator;
+
+class FakeTokenGenerator implements TokenGenerator
+{
+    public function generate(): string
+    {
+        return 'fake-token-123';
+    }
+}