fix: fix test script for forgot password

api/tests/cryptographic-failures.runtime.test.ts

@@ -122,10 +122,17 @@ describe("A04 Cryptographic Failures (runtime adversarial checks)", () => {
   });
 
   it("accepts token with correct signature, issuer, and audience", async () => {
+    const user = await app.prisma.user.create({
+      data: {
+        email: `jwt-runtime-${Date.now()}@test.dev`,
+        emailVerified: true,
+      },
+      select: { id: true },
+    });
     const nowSeconds = Math.floor(Date.now() / 1000);
     const token = signHs256Token(
       {
-        sub: `valid-${Date.now()}`,
+        sub: user.id,
         iss: "skymoney-api",
         aud: "skymoney-web",
         iat: nowSeconds,
@@ -141,5 +148,7 @@ describe("A04 Cryptographic Failures (runtime adversarial checks)", () => {
 
     expect(res.status).toBe(200);
     expect(res.body.ok).toBe(true);
+
+    await app.prisma.user.delete({ where: { id: user.id } });
   });
 });