Add comprehensive test suite and CI/CD pipeline for PR checks

[Copilot]

Adds automated testing infrastructure to verify PRs before merge. Tests cover API endpoints, database operations, authentication, and security.

Test Suite (68 tests)

app.py coverage:

• API endpoint tests (/weather, /hourly, /forecast, /aqi-alerts, /api-test)
• Database CRUD operations and caching behavior
• External API mocking for success/failure scenarios
• Edge cases: extreme coordinates, concurrency

auth.py coverage:

• Password hashing/verification with bcrypt
• JWT token creation, validation, expiration
• Security: timing attack resistance, algorithm validation

GitHub Actions CI Pipeline

jobs:
  test:        # pytest on Python 3.10, 3.11, 3.12 with coverage
  lint:        # Ruff code quality checks
  security:    # Bandit + Safety vulnerability scanning
  api-test:    # Integration tests against running server
  check-status: # Gate that fails PR if tests fail

Files Added

• tests/test_app.py, tests/test_auth.py - Test suites
• tests/conftest.py - Fixtures with isolated temp DB
• .github/workflows/ci.yml - CI pipeline with minimal permissions
• pytest.ini - Test configuration
• .gitignore - Excludes cache/build artifacts

Dependencies Added

pytest>=7.0.0
pytest-cov>=4.0.0
pytest-asyncio>=0.21.0
httpx>=0.24.0,<0.28.0

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• api.open-meteo.com
  • Triggering command: /usr/bin/python python -m pytest tests/ -v --tb=short (dns block)
  • Triggering command: /usr/bin/python python -m pytest tests/ -v --cov=. --cov-report=term-missing --tb=short (dns block)
• https://api.github.com//advisories
  • Triggering command: /home/REDACTED/work/_temp/ghcca-node/node/bin/node /home/REDACTED/work/_temp/ghcca-node/node/bin/node --enable-source-maps /home/REDACTED/work/_temp/copilot-developer-action-main/dist/index.js (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

add deep perfect test cases based on the project so that whenever a user creates a pr the checks will verify if this has to be skipped or to be merged, keep the checks to be of god quality

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.