[repo-assist] test: cover referral service tracking

[github-actions]

🤖 This is an automated pull request from Repo Assist, an automated AI assistant for this repository.

Summary

Adds integration coverage for ReferralService to protect referral tracking behavior:

• null users do not receive a referral ID
• valid referrers increment ReferralCount
• self-referrals are ignored
• unknown referral IDs do not alter users

Rationale

Referral tracking changes user state and relies on Identity claims plus EF Core bulk updates, but previously had no automated coverage. These tests use the existing SQLite-backed integration test factory and unique user IDs so they remain isolated when TUnit runs tests in parallel.

Test Status

• dotnet build EssentialCSharp.Web.Tests/EssentialCSharp.Web.Tests.csproj --no-restore --configuration Release — passed with 0 warnings and 0 errors.
• dotnet test EssentialCSharp.Web.Tests/EssentialCSharp.Web.Tests.csproj — 153 tests passed; two unrelated pre-existing integration tests failed (CaptchaService_Verify_Success and KnownBreachedPassword_IsDetected) because their external service responses were unavailable in this environment.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• api.hcaptcha.com
• api.pwnedpasswords.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "api.hcaptcha.com"
    - "api.pwnedpasswords.com"

See Network Configuration for more information.

Generated by 🌈 Repo Assist, see workflow run. Learn more.
_{Comment /repo-assist to run again}

_{Add this agentic workflow to your repo}

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/repo-assist.md@4bc8419fad05e6b032741cbfd189986700bcf71c