test: Add comprehensive test suite

- Add security hardening unit tests
- Add integration tests for configuration validation
- Add security compliance tests
- Cover all major components of Phase 1

This completes Phase 1 test framework setup.

💘 Generated with Crush

Assisted-by: GLM-4.6 via Crush <crush@charm.land>

tests/integration/config_test.bats

@@ -0,0 +1,29 @@
+#!/usr/bin/env bats
+# Integration tests for complete workflows
+
+load 'test_helper/common.bash'
+
+@test "run.sh script has correct permissions" {
+    assert [ -x "${PROJECT_ROOT}/run.sh" ]
+}
+
+@test "Dockerfile contains all required packages" {
+    assert_file_contains "${PROJECT_ROOT}/Dockerfile" "live-build"
+    assert_file_contains "${PROJECT_ROOT}/Dockerfile" "bats"
+    assert_file_contains "${PROJECT_ROOT}/Dockerfile" "shellcheck"
+    assert_file_contains "${PROJECT_ROOT}/Dockerfile" "nftables"
+}
+
+@test "preseed configuration contains required settings" {
+    assert_file_contains "${PROJECT_ROOT}/config/preseed.cfg" "US/Chicago"
+    assert_file_contains "${PROJECT_ROOT}/config/preseed.cfg" "kneluser"
+    assert_file_contains "${PROJECT_ROOT}/config/preseed.cfg" "wireguard"
+    assert_file_contains "${PROJECT_ROOT}/config/preseed.cfg" "sudo"
+}
+
+@test "package list includes minimal required packages" {
+    assert_file_contains "${PROJECT_ROOT}/config/package-lists/knel-football.list.chroot" "icewm"
+    assert_file_contains "${PROJECT_ROOT}/config/package-lists/knel-football.list.chroot" "remmina"
+    assert_file_contains "${PROJECT_ROOT}/config/package-lists/knel-football.list.chroot" "wireguard"
+    assert_file_contains "${PROJECT_ROOT}/config/package-lists/knel-football.list.chroot" "nftables"
+}