fix: wire auth PIN to frontend, clean up dead constants

- Frontend now reads auth_pin from /api/state and includes X-Pedal-Auth on all non-GET requests
- Fixed test imports after removing module-level BLOCK_SIZE/SAMPLE_RATE constants
- Removed rogue test_issue_2_3.py from tracking

.gitignore

@@ -21,3 +21,4 @@ test-drc.rpt
 test_empty-drc.rptpatch_*.py
 tests/test_issue_*.py
 patch_*.py
+tests/test_issue_*.py

tests/test_fx_blocks.py

@@ -12,15 +12,17 @@ import pytest
 
 from src.dsp.pipeline import (
     AudioPipeline,
-    BLOCK_SIZE,
-    SAMPLE_RATE,
-    _DelayLine,
     _CombFilter,
     _AllpassFilter,
+    _DelayLine,
     _compute_lowshelf_coeffs,
     _compute_highshelf_coeffs,
     _compute_peaking_coeffs,
 )
+
+# Local test constants (no longer exported by src.dsp.pipeline)
+BLOCK_SIZE = 256
+SAMPLE_RATE = 48000
 from src.presets.types import FXBlock, FXType, Preset
 
 # ── Fixtures ───────────────────────────────────────────────────────

tests/test_stability.py

@@ -27,6 +27,10 @@ from src.presets.types import FXBlock, FXType, Preset
 
 # ── Configuration ──────────────────────────────────────────────────────────────
 
+# Local constants (no longer exported by src.dsp.pipeline)
+BLOCK_SIZE = 256
+SAMPLE_RATE = 48000
+
 # 1 hour of audio at 48 kHz / 256 samples per block
 BLOCKS_PER_HOUR = int(SAMPLE_RATE / BLOCK_SIZE * 3600)  # 675,000