feat: add Keycloak authentication

tests/browser/workbench-visual.e2e.ts

@@ -1,4 +1,5 @@
 import { expect, test, type Locator, type Page } from "@playwright/test";
+import { mockAgentApi } from "./support/mock-agent-api";
 
 const EMPTY_RASTER_TILE = Buffer.from(
   "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mNk+A8AAQUBAScY42YAAAAASUVORK5CYII=",
@@ -116,10 +117,19 @@ test.describe("neutral blue mist workbench", () => {
 });
 
 async function prepareDeterministicWorkbench(page: Page) {
+  await mockAgentApi(page, {
+    model: {
+      id: "deepseek/deepseek-v4-flash",
+      label: "快速",
+      description: "快速响应",
+      icon: "bolt"
+    }
+  });
   await page.route("**/runtime-config.js", async (route) => {
     await route.fulfill({
       contentType: "application/javascript",
       body: `globalThis.__TJWATER_CONFIG__ = {
+        TJWATER_AUTH_MODE: "disabled",
         TJWATER_MAPBOX_ACCESS_TOKEN: "visual-test-token",
         TJWATER_MAP_URL: "https://visual-map.invalid/geoserver",
         TJWATER_GEOSERVER_WORKSPACE: "tjwater",
@@ -148,7 +158,9 @@ async function prepareDeterministicWorkbench(page: Page) {
 
 async function openWorkbench(page: Page) {
   await page.goto("/", { waitUntil: "domcontentloaded" });
-  await page.locator("main").evaluate((element) => {
+  const workbench = page.locator("main[data-basemap-tone]");
+  await workbench.waitFor();
+  await workbench.evaluate((element) => {
     element.setAttribute("data-visual-test", "true");
   });
   await page.addStyleTag({