8eb1cf0104
The break glass recovery test was calling GET /api/v1/config which doesn't exist (only PATCH is supported). Changed to use GET /api/v1/security/config and updated the response body accessor from body.security?.admin_whitelist to body.config?.admin_whitelist. Also switched to Playwright's toBeOK() assertion for better error messages on failure.