fix(e2e-ui): multi-workspace identity scopes and dual HMR suite

[patrickleet]

Summary

• OIDC projectIdRef.namespace → shared Project; empty mrNamespace for worktree OIDC apps
• Local seed Secret e2e-ui-oidc so cluster-dev pods schedule without Vault residual
• Helm contract tests for alice/bob scopes + baseUris
• Local dual-worktree suite: two git worktrees, gitops both, HMR beacon isolation (no CI Dory)
• Depends on hops-cli Add SQLite bus transport #90 (--dory-name vs workspace --name)

Stack

Stacked on feat/e2e-ui-local-workbench-identity (#177).

Test plan

• ./tests/e2e-ui/scripts/helm-contract-test.sh
• Local dual suite on Dory: alice+bob FQDNs, beacon update, isolation, dory-name unchanged
• Auth login smoke when shared Project/OIDC Ready (noted not Ready in local auth-smoke)

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: e44c7ed7-44b4-457b-9a68-f77374ab4aed

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[patrickleet]

Depends on hops-cli stacked PR: hops-ops/hops-cli#90