Fix smoke test auth: use correct credentials and username field

- Default to admin/ClubManagement superadmin account
- Login form uses 'username' field, not 'email'
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

tools/smoke_test.php

@@ -16,14 +16,14 @@ $isCli = php_sapi_name() === 'cli';
 // ─── Configuration ──────────────────────────────────────────────────────────
 if ($isCli) {
     $baseUrl = $argv[1] ?? getenv('APP_URL') ?: 'http://localhost';
-    $adminEmail = $argv[2] ?? getenv('ADMIN_EMAIL') ?: 'admin@club.com';
-    $adminPassword = $argv[3] ?? getenv('ADMIN_PASSWORD') ?: 'admin123';
+    $adminEmail = $argv[2] ?? getenv('ADMIN_EMAIL') ?: 'admin';
+    $adminPassword = $argv[3] ?? getenv('ADMIN_PASSWORD') ?: 'ClubManagement';
 } else {
     // Browser mode — auto-detect URL and use session auth
     $scheme = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off') ? 'https' : 'http';
     $baseUrl = $scheme . '://' . ($_SERVER['HTTP_HOST'] ?? 'localhost');
-    $adminEmail = $_POST['email'] ?? $_GET['email'] ?? 'admin@club.com';
-    $adminPassword = $_POST['password'] ?? $_GET['password'] ?? 'admin123';
+    $adminEmail = $_POST['email'] ?? $_GET['email'] ?? 'admin';
+    $adminPassword = $_POST['password'] ?? $_GET['password'] ?? 'ClubManagement';
 }
 $baseUrl = rtrim($baseUrl, '/');
 
@@ -167,7 +167,7 @@ curl_setopt_array($ch, [
     CURLOPT_COOKIEFILE => $cookieFile,
     CURLOPT_POST => true,
     CURLOPT_POSTFIELDS => http_build_query([
-        'email' => $adminEmail,
+        'username' => $adminEmail,
         'password' => $adminPassword,
         '_csrf_token' => $csrfToken,
     ]),