fix: E2E test isolation and analytics consent bugs

- Isolate test web server on port 2349 so E2E tests run alongside Docker
- Use fresh SQLite database per test run via DB_PATH, fixing missing
  roles/audit_log tables from stale migration state
- Fix analytics consent redirect loop when ANALYTICS_ENABLED=false by
  auto-declining consent instead of bare redirect
- Dismiss analytics consent via API in auth setup and RBAC test user
  creation so the consent page never blocks UI tests
- Make Vite port and proxy target configurable via env vars

tests/e2e/rbac-full.spec.ts

@@ -85,6 +85,19 @@ async function createUserWithRole(
   if (!changeRes.ok) {
     throw new Error(`Failed to clear mustChangePassword for ${username}: ${changeRes.status}`);
   }
+
+  // Re-login (change-password invalidates sessions) and dismiss analytics consent
+  const reLogin = await fetch(`${API}/api/auth/login`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ username, password }),
+  });
+  const reLoginData = await reLogin.json();
+  await fetch(`${API}/api/v1/user/analytics`, {
+    method: "PUT",
+    headers: authJson(reLoginData.token),
+    body: JSON.stringify({ enabled: false }),
+  });
 }
 
 /** Delete a user by username if it exists. */