test-infra: re-enable 16 disabled server suites (jest DI + lib0 ESM) (#56)

16 suites were disabled via testPathIgnorePatterns due to two root causes: lib0
ESM not transformed (the @hocuspocus/server -> lib0/decoding.js chain) and stock
'should be defined' specs built via Test.createTestingModule without providers.
Add lib0 to transformIgnorePatterns; convert the 14 DI placeholders to direct
new X(...) instantiation with stub deps (keeping a real construct smoke test);
re-enable the suites. Also updates the public-share limiter test to assert the
fail-closed behavior from #62 (surfaced now that the suite runs). Full server
suite: 67 passed, 689 tests.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/server/src/core/user/user.controller.spec.ts

@@ -1,17 +1,14 @@
-import { Test, TestingModule } from '@nestjs/testing';
 import { UserController } from './user.controller';
-import { UserService } from './user.service';
 
+// Direct instantiation with stub deps, mirroring the rest of these unit specs.
 describe('UserController', () => {
   let controller: UserController;
 
-  beforeEach(async () => {
-    const module: TestingModule = await Test.createTestingModule({
-      controllers: [UserController],
-      providers: [UserService],
-    }).compile();
-
-    controller = module.get<UserController>(UserController);
+  beforeEach(() => {
+    controller = new UserController(
+      {} as any, // userService
+      {} as any, // workspaceRepo
+    );
   });
 
   it('should be defined', () => {