Consolidate testing checklist into phase3.4-testing.md
Replaces phase3.3-testing.md. New doc covers:
- Part 1: Phase 3.4 self-managed auth — backend curl matrix, CC UI
(cookie refresh + bridge), mitra_app + client_app (anonymous →
upgrade, OTP stub codes, social behind flag), cross-app WS handshake
- Parts 2-4: Phase 3.3 topic sensitivity + 3.2 overlay/E2E/iOS + 3/3.1
session lifecycle / chat mechanics / navigation — verbatim carry-over
- Part 5: Cross-cutting regression after 3.4 merge, platform coverage,
security/negative (JWT leak, refresh rotation, cookie flags), and
Known Blockers / Deferred updated for 3.4 reality (Valkey revocation,
merge-on-link, firebase_uid drop, real Fazpass, social creds, Apple
Dev prereqs, JWT rotation procedure)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>