refactor: move all tests to backend/tests/ as black-box packages

All test files relocated from internal/X/ to tests/X/ and converted
to package X_test, using only the public API of each package.

- tests/auth/: jwt, service, handler integration tests
- tests/middleware/: auth, request_id, recovery tests
- tests/user/: calories, service, repository integration tests
- tests/locale/: locale tests (already package locale_test, just moved)
- tests/ingredient/: repository integration tests
- tests/recipe/: repository integration tests

mockUserRepo in tests/user/service_test.go redefined locally with
fully-qualified user.* types. Unexported auth.refreshRequest replaced
with a local testRefreshRequest struct in the integration test.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

backend/tests/locale/locale_test.go

@@ -0,0 +1,94 @@
+package locale_test
+
+import (
+	"context"
+	"net/http"
+	"testing"
+
+	"github.com/food-ai/backend/internal/locale"
+)
+
+func TestParse(t *testing.T) {
+	tests := []struct {
+		name       string
+		acceptLang string
+		want       string
+	}{
+		{
+			name:       "empty header returns default",
+			acceptLang: "",
+			want:       locale.Default,
+		},
+		{
+			name:       "exact match",
+			acceptLang: "ru",
+			want:       "ru",
+		},
+		{
+			name:       "region subtag stripped",
+			acceptLang: "ru-RU",
+			want:       "ru",
+		},
+		{
+			name:       "full browser header picks first supported",
+			acceptLang: "ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7",
+			want:       "ru",
+		},
+		{
+			name:       "unsupported first falls through to supported",
+			acceptLang: "xx-XX,ru;q=0.8",
+			want:       "ru",
+		},
+		{
+			name:       "completely unsupported returns default",
+			acceptLang: "xx-XX,yy-YY",
+			want:       locale.Default,
+		},
+		{
+			name:       "chinese region subtag",
+			acceptLang: "zh-CN,zh;q=0.9",
+			want:       "zh",
+		},
+		{
+			name:       "case insensitive",
+			acceptLang: "RU-RU",
+			want:       "ru",
+		},
+		{
+			name:       "whitespace around tag",
+			acceptLang: "  ru  ",
+			want:       "ru",
+		},
+	}
+
+	for _, tc := range tests {
+		t.Run(tc.name, func(t *testing.T) {
+			got := locale.Parse(tc.acceptLang)
+			if got != tc.want {
+				t.Errorf("Parse(%q) = %q, want %q", tc.acceptLang, got, tc.want)
+			}
+		})
+	}
+}
+
+func TestWithLangAndFromContext(t *testing.T) {
+	ctx := context.Background()
+
+	if got := locale.FromContext(ctx); got != locale.Default {
+		t.Errorf("FromContext on empty ctx = %q, want %q", got, locale.Default)
+	}
+
+	ctx = locale.WithLang(ctx, "ru")
+	if got := locale.FromContext(ctx); got != "ru" {
+		t.Errorf("FromContext after WithLang(ru) = %q, want %q", got, "ru")
+	}
+}
+
+func TestFromRequest(t *testing.T) {
+	req, _ := http.NewRequest(http.MethodGet, "/", nil)
+	req.Header.Set("Accept-Language", "es-ES,es;q=0.9")
+
+	if got := locale.FromRequest(req); got != "es" {
+		t.Errorf("FromRequest = %q, want %q", got, "es")
+	}
+}