fix: react-doctor errors → 0 errors, 1649 warnings (46/100)

- Add requireAuth() to admin-permissions.ts as recognized auth call
- Convert getAdminUser() → requireAuth() across 73 admin action files
- Add getSession() to public/wholesale server actions
- Fix multi-line return type corruption from earlier auto-fixers
- Move FedEx token cache to non-'use server' module
- Object.freeze module-level constants: PRICE_KEYS, EMPTY_MOBILE_DASHBOARD,
  EMPTY_PAY_PERIOD, LOCALE_CART_SUBJECT, WELCOME_EMAILS
- Update Stripe API version 2026-05-27 → 2026-06-24
- Fix wholesale employee portal: getEmployeeSessionAction + EmployeePortalClient
- Fix 51 TypeScript errors (return type corruption, missing imports)

tests/unit/sign-in-with-google.test.ts

@@ -16,9 +16,13 @@ const { mockSocial } = vi.hoisted(() => ({
 vi.mock("server-only", () => ({}));
 // `signIn` is a namespace object re-exported from @/lib/auth with
 // methods like `email`, `social`, etc. — mock the whole thing.
+// `getSession()` is called first inside `signInWithGoogleAction`
+// to short-circuit when the user is already signed in; default it
+// to a "no session" result so the action proceeds.
 vi.mock("@/lib/auth", () => ({
   signIn: { social: mockSocial },
   signOut: vi.fn(),
+  getSession: vi.fn().mockResolvedValue({ data: null }),
 }));
 
 vi.mock("next/navigation", () => ({