fix(web): cover bare session refreshes in midnight E2E

The fixture-preserving route only matched sessions requests with a query string. A later bare /api/sessions refresh could therefore replace the injected date-label sessions and make the release E2E fail nondeterministically. Match both endpoint forms, consistent with the initial-response predicate.

Author: penso

crates/web/ui/e2e/specs/sessions.spec.js

@@ -92,7 +92,7 @@ test.describe("Session management", () => {
 		// This test injects sessions straight into the client store to control
 		// their timestamps. Once the initial server page has materialized main,
 		// keep later refreshes from replacing those fixtures wholesale.
-		await page.route("**/api/sessions?**", (route) =>
+		await page.route(/\/api\/sessions(?:\?|$)/, (route) =>
 			route.fulfill({
 				status: 200,
 				contentType: "application/json",