fix(deploy): prepare server auth root before configure

scripts/test-task13-runtime-fixtures.sh

@@ -80,6 +80,20 @@ else
   TASK13_SESSION_PASSWORD="fixture-private-token-$profile"
   TASK13_SESSION_MIGRATOR_PASSWORD="fixture-migrator-token-$profile"
   task13_write_server_fixture_files
+  original_task13_run_logged="$(declare -f task13_run_logged)"
+  ownership_calls="$fixture/server-auth-ownership.calls"
+  task13_run_logged() {
+    printf '%s\n' "$*" >"$ownership_calls"
+  }
+  task13_prepare_server_auth_canonical_root
+  grep -Fxq -- \
+    "prepare server authentication canonical root sudo -n -- install -d -o 0 -g 0 -m 0700 -- $TASK13_AUTH_ROOT" \
+    "$ownership_calls" || {
+      echo "server auth fixture does not prepare a root-owned private canonical directory" >&2
+      exit 1
+    }
+  unset -f task13_run_logged
+  eval "$original_task13_run_logged"
   compose_files=(
     -f "$root/compose.yaml"
     -f "$root/deploy/compose.server.yaml"