Validate and integrate fleet intelligence features

Fix atlas skip merge under lock, tolerate post-auth WS frames in tests,
and harden test-suite npm invocation on Windows.

server/internal/api/websocket_test.go

@@ -80,8 +80,11 @@ func authAgentConn(t *testing.T, conn *websocket.Conn, payload map[string]interf
 		if err := conn.ReadJSON(&resp); err != nil {
 			t.Fatalf("read auth_response: %v", err)
 		}
-		if resp.Type == "auth_response" {
+		switch resp.Type {
+		case "auth_response":
 			return resp
+		case "clearance_update", "command", "policy_update", "new_job", "adaptive_strategy_update":
+			continue
 		}
 	}
 	t.Fatal("timed out waiting for auth_response")