test(ai): surface the /ai/embed response body when the two-tenant e2e fails

The AI embed/retrieve demo e2e (poisoned_rag, two_tenant) and the rate-limit e2e
return a controlled 503 whose aiCode lives only in the JSON body, which
assertStatus() does not print. Assert the status with the body in the message so
the next CI run reveals the exact failure code and it can be root-caused. No
behaviour change on the success path.

Author: Arcoders

examples/api/tests/@integration/e2e/ai/ai_two_tenant_no_leak.spec.ts

@@ -46,7 +46,11 @@ test.group('AI e2e — two-tenant embed/retrieve isolation (3A)', (group) => {
       .post('/ai/embed')
       .headers(H(a.id, 'user-a'))
       .json({ source: 'kb', input: ['secret-of-A: the refund window is 30 days'] })
-    embedA.assertStatus(200)
+    assert.equal(
+      embedA.status(),
+      200,
+      `POST /ai/embed (tenant A) should succeed; got ${embedA.status()}: ${JSON.stringify(embedA.body())}`
+    )
     // Demo-layer check (review #2): the write succeeded, so SEAM-2 discovery + the AI
     // per-tenant migration created the tenant's ai_embeddings table.
     assert.equal(embedA.body().inserted, 1, 'the ai_embeddings table exists and took the row')