Add samples/usecase/usecase1 UI smoke test and align doc/sample artifacts

[vharseko]

Summary

This PR adds an end-to-end UI smoke test for the Initial Reconciliation
walk-through (samples/usecase/usecase1) and fixes a small set of
documentation / packaging / SQL inconsistencies discovered while wiring it
into CI.

The new smoke test drives the OpenIDM Admin UI through the seven numbered
steps from samples/usecase/README (Mappings page → three iterative recon
runs → managed-user assertions → Self-Service login as user.0/Passw0rd)
and is plugged into the existing ui-smoke-tests matrix as a new sample
cell.

Changes

New

• e2e/usecase1.spec.mjs — Playwright spec, 7 tests mirroring the
  README steps 1)–7). All actions go through the browser; managed-user
  presence/absence is verified through authenticated REST queries (the
  EditResource view renders fields via JSON-Editor, so per-field DOM
  selectors are not stable). A beforeAll hook purges managed/user and
  repo/link so the suite is idempotent across local re-runs.

Modified

• e2e/helpers.mjs — runReconcileNow now snapshots the most recent
  audit/recon summary id before clicking #syncNowButton and waits for a
  new summary id to appear via REST. The previous text-only wait on
  #syncLabel -> "completed" matched stale labels left over from prior
  runs, returning before the new recon had actually started.

• .github/workflows/build.yml

  • Added the samples/usecase/usecase1 cell to the ui-smoke-tests
    matrix (incl. samples_label: usecase1).
  • New conditional step provisions an openidentityplatform/opendj
    container (cn=Directory Manager / password, BaseDN
    dc=example,dc=com) seeded with hr_data.ldif, and waits for
    "OpenDJ is started" in docker logs opendj instead of polling TCP/1389.
  • Per-sample log allow-list: the documented usecase1 walk-through
    legitimately produces SynchronizationException /
    BadRequestException / NotFoundException traces during the early
    recon passes (managers not yet provisioned). These three patterns are
    now filtered out before the strict ERROR|SEVERE|Exception|Throwable
    gate in both the Start OpenIDM and Print openidm logs steps.
    Behaviour for all other samples is unchanged.

• openidm-zip/src/main/assembly/zip.xml — package
  samples/usecase/data/ (with hr_data.ldif) into the distribution.
  Both the README and chap-workflow-samples.adoc reference this file,
  but the assembly previously omitted the directory, so the documented
  ldapmodify / OpenDJ-bootstrap commands could not work from an
  unpacked zip.

• openidm-zip/src/main/resources/samples/usecase/conf/repo.orientdb.json
  — fix unbalanced parenthesis in find-relationships-for-resource SQL
  (extra ) at the end of the WHERE clause). Other repo configs
  (repo.jdbc.json variants) were already correct.

• README.md — fix ./opendm/startup.sh → ./openidm/startup.sh
  typo in the Run OpenIDM section.

Why the allow-list (and not just "fix the errors")

The exceptions caught by the strict log grep
(The referenced relationship 'managed/user/...', does not exist,
Object ... not found in managed/user,
SynchronizationException: The referenced relationship)
are the documented behaviour of usecase1: source rows whose manager
attribute references a managed user that has not been created yet legally
fail on the first/second recon and succeed on the next pass. A local run
produced 228 such lines — every single one is covered by the allow-list
and 0 unexpected ERROR/Exception lines remain. Real regressions
(NPE, Failed to start, OSGi BundleException, OutOfMemoryError, …)
still fail the job.

Local verification

$ npx playwright test e2e/usecase1.spec.mjs --reporter=list
EXIT=0
1 flaky    3) Query the managed users created by the first reconciliation
6 passed

The single flake is an OpenIDM-side race between the recon-summary write
and the relationship-resolver commit; it is absorbed by Playwright's
retries: 1 and does not fail the run.

$ grep -cE "ERROR|SEVERE|Exception|Throwable" openidm/logs/openidm0.log.0
228
$ grep -E "ERROR|SEVERE|Exception|Throwable" openidm/logs/openidm0.log.0 \
    | grep -vE "$ALLOW" | wc -l
0

Out of scope

Documentation prose differences between
samples/usecase/README and
openidm-doc/.../samples-guide/chap-workflow-samples.adoc (empty user
distribution table in the adoc, optional shutdown step, mixed
curl -k vs --cacert style) are noted but left unchanged in this PR.