"verified email > agents are never held back by email" passes every time on a loaded check machine #5231

The flake was in the file's setup hook (beforeAll), not in "agents are never held back by email". The test body does no hashing and no waiting. I changed only test/verify-email.test.ts, and the source is untouched because there is no race in it.

Cause. beforeAll seeded the owner olive with a password, which means an argon2id hash. On a loaded machine that hash plus app startup ran past bun's 5 s hook timeout, so the whole verified email describe block failed. The failure shows up as (unnamed), and the later tests in that block cascade-fail with it. That is why it hit pulls that never touched this file, such as #5126. No test in the file uses the owner's password, so the hash was cost with no purpose.

Fix. The owner is now seeded with no password (seedAdmin allows that), so setup does no argon2 work. I did not widen or add any timeout. Every test in the file still asserts exactly what it did before, including the agent test, which still fails if agents become subject to email verification.

How I checked it:

• Reproduced before the change. I ran four bun test --rerun-each 12 test/verify-email.test.ts in parallel. One run failed with "a beforeEach/afterEach hook timed out" at 5195 ms.
• Verified after the change. The same four parallel runs gave 252 pass and 0 fail in each. Earlier in the session, a single --rerun-each 30 run also passed, 630 of 630. I did not re-run bun test test/verify-email.test.ts test/apps.test.ts after the change.
• Reproduction rate. Before the change, the single --rerun-each 30 run failed once; two later single runs passed, so it only shows under load.

Not done. The edge-account test (an account the edge makes must prove an address too) creates a temp directory and never removes it. That leaves forge-verify-edge-* directories in the temp dir. It is not the flake, so I left it.

Closes #5200

The flake was in the file's setup hook (beforeAll), not in "agents are never held back by email". The test body does no hashing and no waiting. I changed only test/verify-email.test.ts, and the source is untouched because there is no race in it.

Cause. beforeAll seeded the owner olive with a password, which means an argon2id hash. On a loaded machine that hash plus app startup ran past bun's 5 s hook timeout, so the whole verified email describe block failed. The failure shows up as (unnamed), and the later tests in that block cascade-fail with it. That is why it hit pulls that never touched this file, such as #5126. No test in the file uses the owner's password, so the hash was cost with no purpose.

Fix. The owner is now seeded with no password (seedAdmin allows that), so setup does no argon2 work. I did not widen or add any timeout. Every test in the file still asserts exactly what it did before, including the agent test, which still fails if agents become subject to email verification.

How I checked it:

• Reproduced before the change. I ran four bun test --rerun-each 12 test/verify-email.test.ts in parallel. One run failed with "a beforeEach/afterEach hook timed out" at 5195 ms.
• Verified after the change. The same four parallel runs gave 252 pass and 0 fail in each. Earlier in the session, a single --rerun-each 30 run also passed, 630 of 630. I did not re-run bun test test/verify-email.test.ts test/apps.test.ts after the change.
• Reproduction rate. Before the change, the single --rerun-each 30 run failed once; two later single runs passed, so it only shows under load.

Not done. The edge-account test (an account the edge makes must prove an address too) creates a temp directory and never removes it. That leaves forge-verify-edge-* directories in the temp dir. It is not the flake, so I left it.