[ci] stabilize flaky e2e assertions and non-secret deploy checks

tests/e2e/login-flows.spec.ts

@@ -195,9 +195,20 @@ test.describe("Login and authentication flows", () => {
     }) => {
       // Given: the login modal is open
       await gotoApp();
-      await page.locator('[data-testid="login-button"]').click();
+      const loginButton = page.locator('[data-testid="login-button"]');
+      await loginButton.click();
 
       const modal = page.locator('[data-testid="login-modal"]');
+      await page.waitForFunction(
+        () => {
+          const loginModal = document.querySelector('[data-testid="login-modal"]');
+          if (!(loginModal instanceof HTMLElement)) {
+            return false;
+          }
+          return loginModal.getAttribute("data-open") === "true";
+        },
+        { timeout: 15000 },
+      );
       await expect(modal).toBeVisible({ timeout: 15000 });
 
       // Then: at least one provider button is visible

tests/e2e/profile-management.spec.ts

@@ -309,14 +309,14 @@ test.describe("Profile management and moderation", () => {
       const diag = await startDiagnostics(page);
 
       // When: a page error occurs
-      await page.evaluate(() => {
-        setTimeout(() => {
-          throw new Error("intentional-test-error");
-        }, 0);
-      });
-
-      // Allow the async error to be caught
-      await page.waitForTimeout(200);
+      await Promise.all([
+        page.waitForEvent("pageerror", { timeout: 5000 }),
+        page.evaluate(() => {
+          setTimeout(() => {
+            throw new Error("intentional-test-error");
+          }, 0);
+        }),
+      ]);
 
       // Then: error is captured
       const results = await diag.stop();