test(e2e): adminUser fixture bearer token is rejected (401 Invalid token) #1907

What: In tests/fixtures/auth-fixtures.ts, the adminUser fixture's token was rejected as a bearer token (401 {"error":"Invalid token"}) when used for cleanup calls in tests/security-enforcement/acl-waf-layering.spec.ts.

Where: tests/fixtures/auth-fixtures.ts; any spec sending Authorization: Bearer ${adminUser.token}.

Evidence: Found by a Playwright agent while fixing ACL leaks in #1906. Not independently reproduced yet. Cleanup in affected specs may be failing silently, which would leak state into later specs.

Severity: medium

Suggested approach: Reproduce against the E2E container, find why the token is rejected (expiry, session version, wrong token type), then audit specs that rely on it for cleanup and make failures loud.

Found in: #1906