e2e: Playwright suite for homepage + guard chain; RBAC gate on /admin; fix stale service links

tests/e2e/playwright.config.ts

@@ -0,0 +1,43 @@
+import { defineConfig } from "@playwright/test";
+import { BASE_URL, REAL_UA } from "./lib/env";
+
+export default defineConfig({
+  testDir: "./specs",
+  timeout: 90_000,
+  expect: { timeout: 20_000 },
+  retries: 1,
+  workers: 2,
+  fullyParallel: false,
+  reporter: [["list"]],
+  outputDir: "./test-results",
+  use: {
+    baseURL: BASE_URL,
+    userAgent: REAL_UA,
+    ignoreHTTPSErrors: true,
+    viewport: { width: 1440, height: 900 },
+    trace: "retain-on-failure",
+  },
+  projects: [
+    {
+      name: "setup",
+      testMatch: /00-auth\.setup\.ts/,
+    },
+    {
+      name: "standard",
+      testMatch: /(10|12|13)-.*\.spec\.ts/,
+      use: { storageState: ".auth/qa-e2e.json" },
+      dependencies: ["setup"],
+    },
+    {
+      name: "admin",
+      testMatch: /11-.*\.spec\.ts/,
+      use: { storageState: ".auth/qa-e2e-admin.json" },
+      dependencies: ["setup"],
+    },
+    {
+      name: "guest",
+      testMatch: /14-.*\.spec\.ts/,
+      use: { storageState: { cookies: [], origins: [] } },
+    },
+  ],
+});