Tests: add email-gating API coverage; robust task-uncancel seeding; re-quarantine flaky onboarding e2e

- Issue 2 (coverage gap): add HoneyDueAPITests/AuthGatingAPITests — verifies the
  backend's RequireVerified gate (unverified -> 403, verified -> 200) at the API
  layer, since UI-test mode bypasses verification. NOTE: surfaced that the gate
  is applied to only the share-code routes, not residence/task routes — unverified
  users are NOT broadly blocked (flagged for product/backend).
- Issue 4: TaskCRUDUITests seedAccountPreconditions now guarantees a residence
  (no silent early-return), so the cancelled-task precondition always populates;
  XCTUnwrap replaces the misleading "not seeded" skip. The two uncancel tests now
  skip with the ACCURATE reason: cancelled tasks are intentionally hidden from the
  Tasks Kanban and the iOS Tasks view has no "show cancelled" surface (product gap).
- Issue 3: re-quarantine testF110 after a hardening attempt — the register->verify
  transition is irreducibly flaky; coverage is redundant with OnboardingTaskCache
  + the F-series. Skip reason is now precise, with a TODO to stabilize the handoff.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

iosApp/HoneyDueUITests/Task/TaskCRUDUITests.swift

@@ -26,15 +26,23 @@ final class TaskCRUDUITests: AuthenticatedUITestCase {
 
     override func seedAccountPreconditions(_ account: TestAccount) {
         super.seedAccountPreconditions(account)   // seeds seededResidence (requiresResidence)
-        guard let residence = seededResidence else { return }
+
+        // A residence MUST exist before we can seed the cancelled tasks. The base
+        // populates `seededResidence` when `requiresResidence` is true, but rather
+        // than early-returning (and silently skipping the cancelled-task seeding —
+        // which then makes the uncancel tests SKIP instead of run), guarantee one
+        // here: fall back to seeding a residence directly if it's somehow nil.
+        let residence = seededResidence ?? account.seedResidence(name: "Precondition Home")
 
         // TASK-010: a cancelled task that the test will uncancel/reopen.
+        // createCancelledTask is non-optional — it XCTFails (and crashes) on a real
+        // API failure, so a genuine break surfaces as a failure, never a silent skip.
         seededCancelledTask_uncancelFlow = TestDataSeeder.createCancelledTask(
             token: account.token,
             residenceId: residence.id
         )
 
-        // TASK-010 (v2): a named residence+task, cancelled, that the test restores.
+        // TASK-010 (v2): a named task, cancelled, that the test restores.
         let v2Task = account.seedTask(
             residenceId: residence.id,
             title: "Uncancel Me \(Int(Date().timeIntervalSince1970))"
@@ -42,6 +50,33 @@ final class TaskCRUDUITests: AuthenticatedUITestCase {
         seededCancelledTask_uncancelV2 = TestAccountAPIClient.cancelTask(token: account.token, id: v2Task.id) ?? v2Task
     }
 
+    /// Try to bring a task card into view on the Tasks Kanban by its title.
+    ///
+    /// Refreshes via the toolbar button (the Kanban has no pull-to-refresh) and
+    /// swipes the board horizontally, returning the static-text element for the
+    /// card. NOTE: the backend intentionally HIDES cancelled and archived tasks
+    /// from `GET /tasks/` (the board's only data source — see the API's
+    /// `determineExpectedColumn`: cancelled/archived return "" = hidden). So a
+    /// seeded *cancelled* task will never surface here; callers must handle the
+    /// not-found case explicitly.
+    @discardableResult
+    private func revealKanbanTask(titled title: String, maxSwipes: Int = 6) -> XCUIElement {
+        let taskText = app.staticTexts[title]
+
+        refreshTasks()
+        if taskText.waitForExistence(timeout: defaultTimeout) { return taskText }
+
+        let board = app.scrollViews.firstMatch.exists
+            ? app.scrollViews.firstMatch
+            : app.collectionViews.firstMatch
+        for _ in 0..<maxSwipes {
+            guard board.exists else { break }
+            board.swipeLeft()
+            if taskText.waitForExistence(timeout: 1.0) { return taskText }
+        }
+        return taskText
+    }
+
     override func setUpWithError() throws {
         try super.setUpWithError()
 
@@ -254,18 +289,26 @@ final class TaskCRUDUITests: AuthenticatedUITestCase {
 
     func testTASK010_UncancelTaskFlow() throws {
         // Cancelled task was seeded BEFORE login (seedAccountPreconditions) so the
-        // app's post-login fetch already has it.
-        guard let cancelledTask = seededCancelledTask_uncancelFlow else {
-            throw XCTSkip("Cancelled task precondition was not seeded")
-        }
+        // app's post-login fetch already has it. Seeding is guaranteed (the
+        // precondition seeds a residence then a cancelled task, failing hard on a
+        // real API error), so a nil here is a genuine bug — surface it as a
+        // failure, not a skip.
+        let cancelledTask = try XCTUnwrap(
+            seededCancelledTask_uncancelFlow,
+            "Cancelled task precondition was not seeded — seedAccountPreconditions failed to populate it"
+        )
 
         navigateToTasks()
 
-        // Pull to refresh until the cancelled task is visible
-        let taskText = app.staticTexts[cancelledTask.title]
-        pullToRefreshUntilVisible(taskText)
+        // The cancelled task is seeded correctly (asserted above), but the backend
+        // intentionally hides cancelled/archived tasks from the Tasks Kanban
+        // (`GET /tasks/`) — the only view this tab exposes. There is currently no
+        // UI affordance to display, let alone uncancel, a cancelled task from the
+        // Tasks screen, so the flow cannot be exercised end-to-end here. Skip with
+        // the real reason (no longer the misleading "not seeded").
+        let taskText = revealKanbanTask(titled: cancelledTask.title)
         guard taskText.waitForExistence(timeout: defaultTimeout) else {
-            throw XCTSkip("Cancelled task not visible in current view")
+            throw XCTSkip("Cancelled tasks are hidden from the Tasks Kanban by design (backend omits cancelled/archived from GET /tasks/), so there is no UI surface to uncancel from. Seeding succeeded — see seedAccountPreconditions.")
         }
         taskText.forceTap()
 
@@ -289,17 +332,21 @@ final class TaskCRUDUITests: AuthenticatedUITestCase {
     func test15_uncancelRestorescancelledTask() throws {
         // Residence + cancelled task were seeded BEFORE login
         // (seedAccountPreconditions) so the app loads them on its post-login fetch.
-        guard let task = seededCancelledTask_uncancelV2 else {
-            throw XCTSkip("Cancelled task precondition was not seeded")
-        }
+        // Seeding is guaranteed, so a nil here is a genuine bug — fail, don't skip.
+        let task = try XCTUnwrap(
+            seededCancelledTask_uncancelV2,
+            "Cancelled task precondition was not seeded — seedAccountPreconditions failed to populate it"
+        )
 
         navigateToTasks()
 
-        // Pull to refresh until the cancelled task is visible
-        let taskText = app.staticTexts[task.title]
-        pullToRefreshUntilVisible(taskText)
-        guard taskText.waitForExistence(timeout: loginTimeout) else {
-            throw XCTSkip("Cancelled task '\(task.title)' not visible — may require a Cancelled filter to be active")
+        // Seeding succeeded (asserted above), but the backend intentionally hides
+        // cancelled/archived tasks from the Tasks Kanban (`GET /tasks/`) — the only
+        // view this tab exposes — so there is no UI surface to uncancel from. Skip
+        // with the real reason (no longer the misleading "not seeded").
+        let taskText = revealKanbanTask(titled: task.title)
+        guard taskText.waitForExistence(timeout: defaultTimeout) else {
+            throw XCTSkip("Cancelled tasks are hidden from the Tasks Kanban by design (backend omits cancelled/archived from GET /tasks/), so there is no UI surface to uncancel from. Seeding succeeded — see seedAccountPreconditions.")
         }
         taskText.forceTap()
 
@@ -308,9 +355,10 @@ final class TaskCRUDUITests: AuthenticatedUITestCase {
             NSPredicate(format: "label CONTAINS[c] 'Uncancel' OR label CONTAINS[c] 'Reopen' OR label CONTAINS[c] 'Restore'")
         ).firstMatch
 
-        guard uncancelButton.waitForExistence(timeout: defaultTimeout) else {
-            throw XCTSkip("No uncancel button found — feature may not yet be implemented in UI")
-        }
+        uncancelButton.waitForExistenceOrFail(
+            timeout: defaultTimeout,
+            message: "Uncancel/Reopen/Restore action should be available on a cancelled task"
+        )
         uncancelButton.forceTap()
 
         // After uncancelling, the task should no longer show a Cancelled status label