d3a2b5e2ab
The original /products gate test expected either a Products heading (signed-in) or a Sign-in button (signed-out). In practice the page renders NotAuthorized (403) for any session without the right org_role, so the second branch never matched and the test failed. The Sign-in surface is dashboard-only today. Once M10.1 wires a shared sign-in redirect for protected routes, widen this test. Refs: M5.3