fix(test): bootstrap the durable trust superuser identity in test harnesses

Replace ad-hoc create_user calls with bootstrap_trust_superuser /
bootstrap_superuser so trust-mode listeners resolve the configured
principal that configured_trust_identity expects on the first native
frame, matching production bootstrap instead of fabricating an
ephemeral identity.

Author: farhan-syah

nodedb-test-support/src/native_harness/server.rs

@@ -59,14 +59,18 @@ impl NativeTestServer {
             nodedb::control::security::credential::store::CredentialStore::open(&catalog_path)
                 .expect("open credential store");
         let credentials = Arc::new(credential_store);
-        // Provision the harness superuser `nodedb` so Trust-mode strict
-        // identity resolution accepts the default test connection.
-        let _ = credentials.create_user(
-            "nodedb",
-            "nodedb",
-            nodedb::types::TenantId::new(1),
-            vec![nodedb::control::security::identity::Role::Superuser],
-        );
+        // Mirror production bootstrap so trust-mode listeners resolve a durable
+        // configured principal rather than fabricating an ephemeral identity.
+        // The configured trust superuser is what `configured_trust_identity`
+        // reads on the first native frame; `create_user` alone does not set it.
+        match auth_mode {
+            AuthMode::Trust => credentials
+                .bootstrap_trust_superuser("nodedb")
+                .expect("bootstrap trust superuser"),
+            _ => credentials
+                .bootstrap_superuser("nodedb", "nodedb")
+                .expect("bootstrap password superuser"),
+        }
         // Ensure the built-in `default` database (id 0) is present in the
         // catalog so the default connection database works in tests.
         let _ = credentials.catalog().bootstrap_default_database();

nodedb/src/control/server/session/tests.rs

@@ -22,6 +22,13 @@ async fn full_request_response_roundtrip() {
 
     let (dispatcher, data_sides) = Dispatcher::new(1, 64);
     let shared = SharedState::new(dispatcher, wal).unwrap();
+    // Trust-mode sessions auto-authenticate as the configured durable principal
+    // on the first frame; materialize it so `configured_trust_identity` resolves
+    // instead of rejecting with "configured trust identity is unavailable".
+    shared
+        .credentials
+        .bootstrap_trust_superuser("nodedb")
+        .expect("bootstrap trust superuser");
 
     // Start a Data Plane core in a background thread.
     let data_side = data_sides.into_iter().next().unwrap();