M6.5: enroll lasuite-docs (recipe #5, multi-service + S3/MinIO) — install verified green

9-service stack (frontend/backend/celery/y-provider/docspec/postgres/redis/minio/nginx) converges
9/9 and serves the SPA; install 2 passed on host. Root-caused a deploy timeout: cold-pulling ~9
large images exceeds abra's default 300s convergence TIMEOUT -> bumped to 900 via EXTRA_ENV (the
generic per-recipe mechanism, no harness surgery). upgrade/backup use a postgres marker (docs/docs)
exercising the pg_backup.sh DB-dump hook; verifying next.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

tests/lasuite-docs/test_install.py

@@ -0,0 +1,33 @@
+"""lasuite-docs — install stage (recipe #5, multi-service + object-storage/S3). D2 install: the
+multi-service stack (frontend + Django backend + celery + y-provider + docspec + postgres + redis +
+minio + nginx) converges and serves the app over real HTTPS through the gateway.
+
+Login is OIDC-gated (no live OIDC provider in CI), so the functional assertion is that the frontend
+SPA is served (unauthenticated landing), not an authenticated flow."""
+import os
+import sys
+
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), "..", "..", "runner"))
+from harness import lifecycle  # noqa: E402
+
+
+def test_http_reachable(deployed_app):
+    status = lifecycle.http_get(deployed_app, "/")
+    assert status in (200, 301, 302), f"expected 2xx/3xx from {deployed_app}, got {status}"
+
+
+def test_playwright_loads_frontend(deployed_app):
+    """A real browser loads the live Docs frontend (the SPA shell) over HTTPS."""
+    from playwright.sync_api import sync_playwright
+
+    url = f"https://{deployed_app}/"
+    with sync_playwright() as p:
+        browser = p.chromium.launch(args=["--no-sandbox"])
+        try:
+            ctx = browser.new_context(ignore_https_errors=True)
+            page = ctx.new_page()
+            resp = page.goto(url, wait_until="domcontentloaded", timeout=60000)
+            assert resp is not None and resp.status in (200, 301, 302), f"page status {resp and resp.status}"
+            assert "<html" in page.content().lower(), "no HTML served by the frontend"
+        finally:
+            browser.close()