Add QA test outputs, build scripts, and Dockerfile validation

- Created `qa-test-output-after-fix.txt` and `qa-test-output.txt` to log results of certificate page authentication tests.
- Added `build.sh` for deterministic backend builds in CI, utilizing `go list` for efficiency.
- Introduced `codeql_scan.sh` for CodeQL database creation and analysis for Go and JavaScript/TypeScript.
- Implemented `dockerfile_check.sh` to validate Dockerfiles for base image and package manager mismatches.
- Added `sourcery_precommit_wrapper.sh` to facilitate Sourcery CLI usage in pre-commit hooks.

frontend/src/components/__tests__/NotificationCenter.test.tsx

@@ -0,0 +1,172 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest'
+import { render, screen, waitFor } from '@testing-library/react'
+import userEvent from '@testing-library/user-event'
+import { QueryClient, QueryClientProvider } from '@tanstack/react-query'
+import NotificationCenter from '../NotificationCenter'
+import * as api from '../../api/system'
+
+// Mock the API
+vi.mock('../../api/system', () => ({
+  getNotifications: vi.fn(),
+  markNotificationRead: vi.fn(),
+  markAllNotificationsRead: vi.fn(),
+  checkUpdates: vi.fn(),
+}))
+
+const createWrapper = () => {
+  const queryClient = new QueryClient({
+    defaultOptions: {
+      queries: {
+        retry: false,
+      },
+    },
+  })
+  return ({ children }: { children: React.ReactNode }) => (
+    <QueryClientProvider client={queryClient}>{children}</QueryClientProvider>
+  )
+}
+
+const mockNotifications: api.Notification[] = [
+  {
+    id: '1',
+    type: 'info',
+    title: 'Info Notification',
+    message: 'This is an info message',
+    read: false,
+    created_at: '2025-01-01T10:00:00Z',
+  },
+  {
+    id: '2',
+    type: 'success',
+    title: 'Success Notification',
+    message: 'This is a success message',
+    read: false,
+    created_at: '2025-01-01T11:00:00Z',
+  },
+  {
+    id: '3',
+    type: 'warning',
+    title: 'Warning Notification',
+    message: 'This is a warning message',
+    read: false,
+    created_at: '2025-01-01T12:00:00Z',
+  },
+  {
+    id: '4',
+    type: 'error',
+    title: 'Error Notification',
+    message: 'This is an error message',
+    read: false,
+    created_at: '2025-01-01T13:00:00Z',
+  },
+]
+
+describe('NotificationCenter', () => {
+  beforeEach(() => {
+    vi.clearAllMocks()
+    vi.mocked(api.checkUpdates).mockResolvedValue({
+      available: false,
+      latest_version: '0.0.0',
+      changelog_url: '',
+    })
+  })
+
+  afterEach(() => {
+    vi.clearAllMocks()
+  })
+
+  it('renders bell icon and unread count', async () => {
+    vi.mocked(api.getNotifications).mockResolvedValue(mockNotifications)
+    render(<NotificationCenter />, { wrapper: createWrapper() })
+
+    expect(screen.getByRole('button', { name: /notifications/i })).toBeInTheDocument()
+
+    await waitFor(() => {
+      expect(screen.getByText('4')).toBeInTheDocument()
+    })
+  })
+
+  it('opens notification panel on click', async () => {
+    vi.mocked(api.getNotifications).mockResolvedValue(mockNotifications)
+    render(<NotificationCenter />, { wrapper: createWrapper() })
+
+    const bellButton = screen.getByRole('button', { name: /notifications/i })
+    await userEvent.click(bellButton)
+
+    await waitFor(() => {
+      expect(screen.getByText('Notifications')).toBeInTheDocument()
+      expect(screen.getByText('Info Notification')).toBeInTheDocument()
+      expect(screen.getByText('Success Notification')).toBeInTheDocument()
+      expect(screen.getByText('Warning Notification')).toBeInTheDocument()
+      expect(screen.getByText('Error Notification')).toBeInTheDocument()
+    })
+  })
+
+  it('displays empty state when no notifications', async () => {
+    vi.mocked(api.getNotifications).mockResolvedValue([])
+    render(<NotificationCenter />, { wrapper: createWrapper() })
+
+    const bellButton = screen.getByRole('button', { name: /notifications/i })
+    await userEvent.click(bellButton)
+
+    await waitFor(() => {
+      expect(screen.getByText('No new notifications')).toBeInTheDocument()
+    })
+  })
+
+  it('marks single notification as read', async () => {
+    vi.mocked(api.getNotifications).mockResolvedValue(mockNotifications)
+    vi.mocked(api.markNotificationRead).mockResolvedValue()
+
+    render(<NotificationCenter />, { wrapper: createWrapper() })
+
+    await userEvent.click(screen.getByRole('button', { name: /notifications/i }))
+
+    await waitFor(() => {
+      expect(screen.getByText('Info Notification')).toBeInTheDocument()
+    })
+
+    const closeButtons = screen.getAllByRole('button', { name: /close/i })
+    await userEvent.click(closeButtons[0])
+
+    await waitFor(() => {
+      expect(api.markNotificationRead).toHaveBeenCalledWith('1', expect.anything())
+    })
+  })
+
+  it('marks all notifications as read', async () => {
+    vi.mocked(api.getNotifications).mockResolvedValue(mockNotifications)
+    vi.mocked(api.markAllNotificationsRead).mockResolvedValue()
+
+    render(<NotificationCenter />, { wrapper: createWrapper() })
+
+    await userEvent.click(screen.getByRole('button', { name: /notifications/i }))
+
+    await waitFor(() => {
+      expect(screen.getByText('Mark all read')).toBeInTheDocument()
+    })
+
+    await userEvent.click(screen.getByText('Mark all read'))
+
+    await waitFor(() => {
+      expect(api.markAllNotificationsRead).toHaveBeenCalled()
+    })
+  })
+
+  it('closes panel when clicking outside', async () => {
+    vi.mocked(api.getNotifications).mockResolvedValue(mockNotifications)
+    render(<NotificationCenter />, { wrapper: createWrapper() })
+
+    await userEvent.click(screen.getByRole('button', { name: /notifications/i }))
+
+    await waitFor(() => {
+      expect(screen.getByText('Notifications')).toBeInTheDocument()
+    })
+
+    await userEvent.click(screen.getByTestId('notification-backdrop'))
+
+    await waitFor(() => {
+      expect(screen.queryByText('Notifications')).not.toBeInTheDocument()
+    })
+  })
+})