QA pass on the member profile gate: stable button ids, completion opens the dashboard tab, local devCode, 47-test E2E suite

Findings fixed: the gate's buttons had no stable ids (fragile to test and maintain), and finishing the
gate left the member on the pitch tab where the profile card and Messages are not visible, so
completion now opens the Position Dashboard tab. /api/public/profile/email-start returns devCode
outside production so the flow is testable locally, matching the InstantAdPay pattern.

qa/profiles-unit.mjs (28 assertions) and qa/gate-e2e.mjs (47 assertions, real sessions, real UI) with
a README. All pass.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

profiles.js

@@ -168,5 +168,8 @@ function coverage() {
 }
 function adminList() { return Object.values(db.byId).map(pub).sort((a, b) => a.id - b.id); }
 
-module.exports = { init, get, pub, status, complete, isComplete, setUsername, byUsername, suggest,
+// local testing only: the server exposes this outside production, never on the live site
+function peekCode(id) { const st = codes.get(norm(id)); return st ? st.code : null; }
+
+module.exports = { init, get, pub, status, complete, isComplete, setUsername, byUsername, suggest, peekCode,
   startEmail, verifyEmail, contactFor, setTelegram, positionsFor, coverage, adminList, ensure, USER_RE, EMAIL_RE };