Add Playwright tests for contacts API and cleanup duplicate config files

backend/src/__tests__/contacts.test.js

@@ -128,4 +128,26 @@ test('POST /contacts/respond should validate requestId and accept (zod)', async
   });
 
   assert.strictEqual(response.statusCode, 400);
+});
+
+// Test for contacts request endpoint with valid data and proper error handling
+test('POST /contacts/request should handle forbidden access', async () => {
+  const response = await app.inject({
+    method: 'POST',
+    url: '/contacts/request',
+    payload: { dealId: 1, targetUserId: 2 }
+  });
+
+  assert.strictEqual(response.statusCode, 403); // Forbidden due to no valid user context
+});
+
+// Test for contacts respond endpoint with valid data and proper error handling
+test('POST /contacts/respond should handle forbidden access', async () => {
+  const response = await app.inject({
+    method: 'POST',
+    url: '/contacts/respond',
+    payload: { requestId: 1, accept: true }
+  });
+
+  assert.strictEqual(response.statusCode, 403); // Forbidden due to no valid user context
 });