test(e2e): Wave 4b — UI-driven Razorpay TEST-card payment E2E (free → upgrade → Pro)

.github/workflows/e2e-live.yml

@@ -104,6 +104,15 @@ jobs:
           # self-skip loudly; the contract-only legs (OAuth state-replay, CORS,
           # CLI canonical host, magic-link start, tampered-token) still run.
           E2E_JWT_SECRET: ${{ secrets.E2E_JWT_SECRET }}
+          # Wave 4b: arm the FULL Razorpay TEST-card payment leg in
+          # live-ui-payment.spec.ts. INERT until the operator wires rzp_test_*
+          # keys on the staging api AND sets vars.E2E_RAZORPAY_TEST_MODE=1 —
+          # otherwise the card-entry test skips clean. See
+          # docs/ci/01-CI-INTEGRATION-DESIGN.md §"Razorpay test-card payment".
+          E2E_RAZORPAY_TEST_MODE: ${{ vars.E2E_RAZORPAY_TEST_MODE }}
+          # The payment spec mints its OWN free cohort account via the factory;
+          # arm it with the mint-guard token so it doesn't skip-on-unarmed.
+          E2E_ACCOUNT_TOKEN: ${{ secrets.E2E_ACCOUNT_TOKEN }}
         run: npm run test:e2e:live
 
       # Reaper ALWAYS runs (even on test failure/cancel) so a leaked resource

.github/workflows/e2e-prod.yml

@@ -160,6 +160,13 @@ jobs:
           # X-E2E-Test-Token header skips the per-fingerprint cap when it matches
           # this secret (api internal/middleware/fingerprint.go).
           E2E_TEST_TOKEN: ${{ secrets.E2E_TEST_TOKEN }}
+          # Wave 4b: arm the FULL Razorpay TEST-card payment leg in
+          # live-ui-payment.spec.ts. Sourced from a repo VARIABLE so it is
+          # INERT until the operator wires rzp_test_* keys on the api AND flips
+          # vars.E2E_RAZORPAY_TEST_MODE=1. Until then the card-entry test
+          # skips clean; the @pr-smoke contract-only leg always runs. See
+          # docs/ci/01-CI-INTEGRATION-DESIGN.md §"Razorpay test-card payment".
+          E2E_RAZORPAY_TEST_MODE: ${{ vars.E2E_RAZORPAY_TEST_MODE }}
         run: npm run test:e2e:live
 
       - name: Reap minted account (teardown)