fix(tests): fix remaining CI failures for URL.createObjectURL and Response mocking

Two root causes:

1. authUrl.test.ts (007, 011, 012): Object.defineProperty in setup.ts
   fails silently on CI when jsdom's URL.createObjectURL is
   non-configurable. vi.restoreAllMocks() in beforeEach then restores
   the property to jsdom's native implementation (returns '').
   Fix: assign URL.createObjectURL = vi.fn(() => 'blob:mock') directly
   in authUrl.test.ts's beforeEach, after restoreAllMocks(), so every
   test in the file gets a fresh, reliable mock. Remove the now-
   unnecessary mockClear() from test 012.

2. client.test.ts (013): MSW patches the global Response constructor and
   calls blob.stream() on the body — a method not implemented by jsdom's
   Blob. Fix: replace new Response(blob) with a plain-object duck-type
   ({ ok: true, blob: () => Promise.resolve(blob) }) to bypass the
   patched constructor entirely.

client/tests/unit/api/authUrl.test.ts

@@ -9,6 +9,12 @@ const flushPromises = () => new Promise<void>(r => setTimeout(r, 10));
 beforeEach(() => {
   clearImageQueue();
   vi.restoreAllMocks(); // restore any vi.spyOn() wrappers from the previous test
+
+  // jsdom's URL.createObjectURL returns '' and may be non-configurable, so
+  // Object.defineProperty in setup.ts can fail silently on CI. Assign directly
+  // here (after restoreAllMocks) so every test in this file gets a fresh mock.
+  URL.createObjectURL = vi.fn(() => 'blob:mock') as typeof URL.createObjectURL;
+  URL.revokeObjectURL = vi.fn() as typeof URL.revokeObjectURL;
 });
 
 // ── getAuthUrl ─────────────────────────────────────────────────────────────────
@@ -193,7 +199,6 @@ describe('clearImageQueue', () => {
     it('removes queued items so they never execute after active slots drain', async () => {
       const resolvers: Array<() => void> = [];
       const createObjectURLSpy = vi.spyOn(URL, 'createObjectURL');
-      createObjectURLSpy.mockClear(); // vi.spyOn returns the same vi.fn() set in setup.ts; reset accumulated calls from prior tests
 
       vi.spyOn(globalThis, 'fetch').mockImplementation(async () => {
         await new Promise<void>(r => resolvers.push(r));