[Copilot]

SessionGuard::userFromRecaller had no test for a recaller cookie whose remember-token segment is empty. This PR adds one.

• tests/Auth/AuthGuardTest.php
  • Adds testUserReturnsNullWhenRememberCookieHasEmptyToken, which uses the cookie value id||baz.
  • Asserts that user() returns null, viaRemember() is false, and retrieveByToken is never called.
  • The provider is never called because Recaller::valid() rejects an empty token segment, so userFromRecaller returns early.

$request = Request::create('/', 'GET', [], [$guard->getRecallerName() => 'id||baz']);
// ...
$guard->getProvider()->shouldReceive('retrieveByToken')->never();
$this->assertNull($guard->user());
$this->assertFalse($guard->viaRemember());

This PR adds no production code changes.

I could not run the new test locally because dependencies could not be installed in the sandbox, so it needs a CI run.