chore(deps): bump tower-http from 0.6.11 to 0.7.0

Cargo.toml

@@ -61,7 +61,7 @@ tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt"] }
 # fallback is only mounted when `OPENCOMPANY_CONSOLE_DIR` points at a real
 # directory, so the default build's behavior is byte-for-byte unchanged. Pure
 # Rust, no system libs, no network.
-tower-http = { version = "0.6", features = ["fs"] }
+tower-http = { version = "0.7", features = ["fs"] }
 # `ServiceExt::oneshot` lets the `/` SPA fallback hand a request off to
 # `ServeDir` from inside an axum handler, so reserved server prefixes can 404
 # before the static service ever sees them. Already in the tree via `tower-http`

frontend/test/e2e/board-columns.spec.ts

@@ -246,6 +246,15 @@ test("a card dropped into Planning is planned and settled, never left parked", a
 
   const read = async () => (await (await request.get(`${API}/tasks/${id}`)).json()).task;
 
+  // First the drop must land: the card was seeded in `todo`, so polling the
+  // negative before the move reaches the host passes on the seed column and
+  // the settle read below catches the card back in `planning` mid-pass. Wait
+  // for the transition into Planning first — the same first step the mock-lane
+  // test above takes — then wait for the pass to settle it.
+  await expect
+    .poll(async () => (await read()).column, { timeout: 15_000 })
+    .toBe("planning");
+
   // It reached the host and the pass settled it. A card still in `planning`
   // when this expires is the real failure this test exists to catch: either the
   // drop never landed, or a pass started and never finished.