test(e2e): sign in with a password and a passkey, and sign out, against the real server

The login spec stubbed the login route to prove the form shows an error. It
now spends a real 401, and three journeys run on the sign-in account of
their project: a password sign-in that lands on the dashboard as that
account, a sign-out whose old cookie is refused afterwards (with a positive
control before it), and a passkey registered in settings through Chromium's
virtual authenticator that signs the account back in.

src/__tests__/e2e-critical-no-api-stub-guard.test.ts

@@ -49,7 +49,7 @@ const E2E = join(process.cwd(), "e2e");
  * the set is the release gate, so a journey that loses its tag is a change
  * somebody should see here.
  */
-const CRITICAL_TEST_FLOOR = 7;
+const CRITICAL_TEST_FLOOR = 10;
 
 /** A test whose title literal carries the tag, however the call is spelled. */
 const CRITICAL_TEST =