Harden auth/vault path sanitization and clean WeKnora docs

scripts/task487-local-folder-tree-live-consumer-smoke.js

@@ -1,6 +1,7 @@
 #!/usr/bin/env node
 "use strict";
 
+const { loginViaAuthForm } = require('./lib/browser-auth-login');
 /**
  * task487 — Local Folder Tree Live Consumer smoke
  *
@@ -188,13 +189,14 @@ async function run() {
   let fatalError = null;
 
   try {
-    // ── 登录 ──
+    // ── 登录（7-76 P0：标准表单）──
     await page.goto(`${BASE_URL}/auth`, { waitUntil: "domcontentloaded", timeout: UI_TIMEOUT_MS });
-    const quickLoginButton = page.getByRole("button", { name: "测试账号快速登录" });
-    if (await quickLoginButton.count()) {
-      await quickLoginButton.click({ timeout: UI_TIMEOUT_MS });
-      await page.waitForURL((url) => url.pathname === "/", { timeout: UI_TIMEOUT_MS });
-    }
+    await loginViaAuthForm(page, {
+      baseUrl: BASE_URL,
+      timeoutMs: UI_TIMEOUT_MS,
+      gotoAuth: false,
+    });
+    await page.waitForURL((url) => url.pathname === "/", { timeout: UI_TIMEOUT_MS }).catch(() => {});
 
     // ── Phase 1: Page Tree 视图 ──
     await page.goto(documentUrl(root, "README.md", "page"), { waitUntil: "domcontentloaded", timeout: UI_TIMEOUT_MS });