Re-architect iOS XCUITest suite: per-test isolation + domain organization

Migrate the XCUITest suite off the legacy shared-account model (and the
prior Django-style auth assumptions) to a parallel-safe, domain-organized
architecture, validated end-to-end against the live Kratos stack.

Isolation (parallel-safe by construction):
- Core/Fixtures/TestAccount.swift: each test mints its own pre-verified
  Kratos identity (uit_<domain>_<uuid>@test.honeydue.local), logs in, seeds
  under its own token, and deletes the identity in teardown (cascading all
  data + clearing Kratos). No shared testuser; parallel workers no longer race.
- AuthenticatedUITestCase rewritten to that model (member surface preserved);
  adds requiresResidence / seedAccountPreconditions to seed UI-gated data
  BEFORE login (a fresh account is empty at login).

Organization (255 tests preserved, none dropped):
- 21 domain suites under Auth/ Onboarding/ Residence/ Task/ Contractor/
  Document/ Sharing/ Navigation/ Smoke/ CrossCutting/ E2E/, consistent
  <Domain>UITests naming. Removes the Suite1..11 / AAA_ / ZZ_ / Tests/Rebuild
  naming chaos and the overlapping task/residence/auth suites.

Runner + test plans:
- run_ui_tests.sh: Smoke gate -> Seed -> Parallel(8 workers) -> Sweep. The
  parallel phase runs the whole target minus phase-managed suites via
  -skip-testing, so new suites auto-include (no hand-maintained list to drift).
  Drops the 2-worker cap and Suite6 isolation (isolation made them moot).
- HoneyDueUITests.xctestplan skips the 4 phase-managed suites; adds Smoke.xctestplan.

Kratos auth fixes folded in (login/verify/reset endpoints removed under Kratos):
real Mailpit verification codes replace the obsolete fixed "123456"; teardown
deletes Kratos identities; admin-panel login uses the correct seeded password.

Build green; isolation, parallelism, and the precondition/sharing migrations
validated against the live stack (0 leaked accounts).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

iosApp/HoneyDueUITests/Tests/FeatureCoverageTests.swift

@@ -7,6 +7,10 @@ final class FeatureCoverageTests: AuthenticatedUITestCase {
     override var needsAPISession: Bool { true }
     override var testCredentials: (username: String, password: String) { ("admin", "Test1234") }
     override var apiCredentials: (username: String, password: String) { ("admin", "Test1234") }
+    // Relaunch per test: the residence-detail kanban can show a stale empty list
+    // for an API-seeded task when reusing a session (the known empty-cache window),
+    // so a fresh launch per test keeps task-completion tests (07/08) deterministic.
+    override var relaunchBetweenTests: Bool { true }
 
     // MARK: - Helpers
 
@@ -53,6 +57,14 @@ final class FeatureCoverageTests: AuthenticatedUITestCase {
         // Seed a residence via API so we always have a known target
         let residenceName = "FeatureCoverage Home \(Int(Date().timeIntervalSince1970))"
         let seeded = cleaner.seedResidence(name: residenceName)
+        // Tests 07/08 expect a pre-existing "Seed Task" in the residence detail.
+        // Fresh Kratos accounts have no data, so seed the task explicitly here.
+        // The detail screen defaults to the "Overdue" column, so give the task a
+        // past due date to guarantee it renders in the default visible column.
+        let dueFormatter = ISO8601DateFormatter()
+        dueFormatter.formatOptions = [.withFullDate]
+        let pastDue = dueFormatter.string(from: Calendar.current.date(byAdding: .day, value: -3, to: Date())!)
+        _ = cleaner.seedTask(residenceId: seeded.id, title: "Seed Task", fields: ["due_date": pastDue])
 
         navigateToResidences()
 
@@ -69,6 +81,14 @@ final class FeatureCoverageTests: AuthenticatedUITestCase {
         // Wait for detail to load
         let detailContent = app.staticTexts[seeded.name]
         _ = detailContent.waitForExistence(timeout: defaultTimeout)
+
+        // The task was seeded via API after the detail view's cache was primed, so
+        // its kanban can show an empty (stale) list. Pull-to-refresh until the
+        // seeded "Seed Task" surfaces, defeating the empty-cache window.
+        let seedTask = app.staticTexts.containing(
+            NSPredicate(format: "label CONTAINS[c] 'Seed Task'")
+        ).firstMatch
+        pullToRefreshUntilVisible(seedTask, maxRetries: 4)
     }
 
     // MARK: - Profile Edit