Fix flaky emergency-token.spec.ts test that failed in CI Shard 4 with:
"ACL verification failed - ACL not showing as enabled after retries"
Root cause: Race condition where ACL was enabled before Cerberus
middleware had fully propagated. The enable API returned 200 but
the security status endpoint didn't reflect the change in time.
Changes:
Add STEP 1b: Cerberus verification loop after Cerberus enable
Wait for cerberus.enabled=true before proceeding to ACL enable
Use same retry pattern with CI_TIMEOUT_MULTIPLIER
Fixes: Shard 4 E2E failures in PR #583