Swap real PBKDF2 for a trivial insecure scheme in tests (make returns
fake$<password>, verify compares) so suites creating many users skip the
deliberate hashing cost. Matches AdonisJS hash.fake(). +1 test (418).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Tn7UJG3uSLwPcWaKo9gHgC