fix(ci): fix postgres TCP setup and truncateAll superuser error

- Use apt-get install + configure listen_addresses + md5 auth in pg_hba
  so psql can connect via 127.0.0.1 (not just Unix socket)
- Use pg_ctlcluster restart after config changes + wait for pg_isready
- Replace session_replication_role (requires superuser) with a single
  TRUNCATE ... CASCADE which handles FK deps without elevated privileges
- All 3 integration tests now pass in CI (act + Gitea Actions)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

tests/helpers/db_integration.ts

@@ -18,29 +18,15 @@ function createTestPool(): pg.Pool {
     user: Deno.env.get("POSTGRES_USER") ?? "test",
     password: Deno.env.get("POSTGRES_PASS") ?? "test",
     database: Deno.env.get("POSTGRES_DB") ?? "polympr_test",
+    ssl: false,
   });
 }
 
 export const testPool = createTestPool();
 export const testDb = drizzle(testPool, { schema });
 
-// Ordre de truncate respectant les FK (enfants avant parents)
-const TRUNCATE_ORDER = [
-  "mobility",
-  "ajustements",
-  "notes",
-  "ue_modules",
-  "enseignements",
-  "role_permissions",
-  "students",
-  "ue_modules",
-  "users",
-  "modules",
-  "ues",
-  "promotions",
-  "permissions",
-  "roles",
-] as const;
+const ALL_TABLES =
+  '"mobility","ajustements","notes","ue_modules","enseignements","role_permissions","students","users","modules","ues","promotions","permissions","roles"';
 
 /**
  * Vide toutes les tables dans le bon ordre.
@@ -49,12 +35,9 @@ const TRUNCATE_ORDER = [
 export async function truncateAll(): Promise<void> {
   const client = await testPool.connect();
   try {
-    // Désactiver les FK temporairement pour simplifier
-    await client.query("SET session_replication_role = replica");
-    for (const table of TRUNCATE_ORDER) {
-      await client.query(`TRUNCATE TABLE "${table}" RESTART IDENTITY CASCADE`);
-    }
-    await client.query("SET session_replication_role = DEFAULT");
+    await client.query(
+      `TRUNCATE TABLE ${ALL_TABLES} RESTART IDENTITY CASCADE`,
+    );
   } finally {
     client.release();
   }

tests/integration/users_test.ts

@@ -0,0 +1,58 @@
+import { assertEquals, assertExists } from "@std/assert";
+import {
+  closeTestPool,
+  seedRoles,
+  seedUsers,
+  testDb,
+  truncateAll,
+} from "../helpers/db_integration.ts";
+import { users } from "$root/databases/schema.ts";
+
+Deno.test({
+  name: "integration: GET /users - DB round trip",
+  async fn() {
+    await truncateAll();
+
+    const [role] = await seedRoles([{ nom: "employee" }]);
+    await seedUsers([
+      { id: "dupont.jean", nom: "Dupont", prenom: "Jean", idRole: role.id },
+      { id: "martin.alice", nom: "Martin", prenom: "Alice", idRole: role.id },
+    ]);
+
+    const rows = await testDb.select().from(users);
+    assertEquals(rows.length, 2);
+    assertExists(rows.find((u) => u.id === "dupont.jean"));
+  },
+  sanitizeResources: false,
+  sanitizeOps: false,
+});
+
+Deno.test({
+  name: "integration: INSERT user and retrieve by id",
+  async fn() {
+    await truncateAll();
+
+    const [role] = await seedRoles([{ nom: "admin" }]);
+    const [created] = await testDb.insert(users).values({
+      id: "durand.claire",
+      nom: "Durand",
+      prenom: "Claire",
+      idRole: role.id,
+    }).returning();
+
+    assertExists(created);
+    assertEquals(created.id, "durand.claire");
+    assertEquals(created.nom, "Durand");
+  },
+  sanitizeResources: false,
+  sanitizeOps: false,
+});
+
+Deno.test({
+  name: "integration: cleanup - close pool",
+  async fn() {
+    await closeTestPool();
+  },
+  sanitizeResources: false,
+  sanitizeOps: false,
+});