feat(test): M5.3 — Playwright e2e harness for the dev stack

playwright.config.ts + tests/e2e/{apex,tenant,health}.spec.ts. make e2e for local. CI e2e job opt-in via RUN_E2E repo variable. OIDC click-through deferred to when stage is up.

Refs: M5.3

Makefile

@@ -4,13 +4,15 @@
 
 help:
 	@echo "portal targets:"
-	@echo "  make install      pnpm install"
-	@echo "  make dev          pnpm dev (http://localhost:3000)"
-	@echo "  make test         pnpm test (vitest + coverage)"
-	@echo "  make lint         pnpm lint"
-	@echo "  make typecheck    pnpm typecheck"
-	@echo "  make build        pnpm build (Next.js production build)"
-	@echo "  make docker       build local image (portal:dev)"
+	@echo "  make install       pnpm install"
+	@echo "  make dev           pnpm dev (http://localhost:3000)"
+	@echo "  make test          pnpm test (vitest + coverage)"
+	@echo "  make lint          pnpm lint"
+	@echo "  make typecheck     pnpm typecheck"
+	@echo "  make build         pnpm build (Next.js production build)"
+	@echo "  make e2e           pnpm e2e (Playwright; needs dev stack + tenant-registry + portal running)"
+	@echo "  make e2e-install   one-time browser install"
+	@echo "  make docker        build local image (portal:dev)"
 
 install:
 	@pnpm install --frozen-lockfile
@@ -30,6 +32,12 @@ typecheck:
 build:
 	@pnpm build
 
+e2e:
+	@pnpm e2e
+
+e2e-install:
+	@pnpm e2e:install
+
 docker:
 	@docker build -t portal:dev .