fix(docker+tests): restore rig LDAP login via redundant local GLAuth pair + FallbackServers

The rig pointed at the shared 10.100.0.35 GLAuth whose serviceaccount password
was rotated (SEC-36), so central login had been failing ('Authentication service
is misconfigured') and a TEMP DisableLogin workaround was pending. Central nodes
now point at the local redundant pair (scadaproj/infra/glauth-redundant,
host.docker.internal:3893 + FallbackServers :3894), where the dev bind password
is correct — live-gated on the redeployed rig: login OK, primary-kill failover,
sticky preference (bind-count proven), walk-back on backup-kill.

AuthFlowTests factory bound as cn=admin for search-then-bind, but the current
directory grants the search capability only to serviceaccount (admin searches
return 50 Insufficient access) — stale since the GLAuth config evolved; the test
had been skipping on the closed port and failed once anything answered :3893.
Now binds as serviceaccount; AuthFlowTests 5/5 against the pair.

tests/ZB.MOM.WW.ScadaBridge.IntegrationTests/ScadaBridgeWebApplicationFactory.cs

@@ -54,11 +54,14 @@ public class ScadaBridgeWebApplicationFactory : WebApplicationFactory<Program>
             ["ScadaBridge__Security__Ldap__Transport"] = "None",
             ["ScadaBridge__Security__Ldap__AllowInsecure"] = "true",
             ["ScadaBridge__Security__Ldap__SearchBase"] = "dc=zb,dc=local",
-            // GLAuth places users at cn=<name>,ou=<group>,ou=users,dc=... — a service
-            // account is configured to enable the shared service's search-then-bind:
-            // resolve the user's real DN by (UserNameAttribute=<name>) lookup, then bind it.
-            ["ScadaBridge__Security__Ldap__ServiceAccountDn"] = "cn=admin,ou=SCADA-Admins,ou=users,dc=zb,dc=local",
-            ["ScadaBridge__Security__Ldap__ServiceAccountPassword"] = "password",
+            // Search-then-bind needs an account holding GLAuth's `search` capability, which
+            // the current directory grants ONLY to `serviceaccount` (binding as `admin`
+            // succeeds but its searches return `50 Insufficient access`, i.e. auth reads as
+            // "service unavailable"). Matches the local redundant pair
+            // (scadaproj/infra/glauth-redundant), whose serviceaccount password is the
+            // well-known dev value — the shared 10.100.0.35 instance's is rotated (SEC-36).
+            ["ScadaBridge__Security__Ldap__ServiceAccountDn"] = "cn=serviceaccount,dc=zb,dc=local",
+            ["ScadaBridge__Security__Ldap__ServiceAccountPassword"] = "serviceaccount123",
         };
 
         foreach (var (key, value) in envVars)