fix(e2e): auth helper — bypass CORS via server-side API call + inject localStorage

playwright.config.ts

@@ -2,7 +2,8 @@ import { defineConfig, devices } from '@playwright/test';
 
 export default defineConfig({
   testDir: './e2e',
-  fullyParallel: false, // run serially — shared demo tenant
+  timeout: 60000, // 60s per test — accounts for ~2s API latency via CF tunnel
+  fullyParallel: false,
   forbidOnly: !!process.env.CI,
   retries: 1,
   workers: 1,