Clarify Gitea verification failure diagnostics

tools/verify-container.mjs

@@ -6,6 +6,7 @@ import { setTimeout as delay } from 'node:timers/promises';
 import { mkdtempSync, readFileSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
 import { join as joinPath } from 'node:path';
+import { describeFailure } from './admin-verification-diagnostics.mjs';
 
 const image = process.argv[2];
 if (!image) throw new Error('Usage: node tools/verify-container.mjs IMAGE');
@@ -171,12 +172,15 @@ try {
   }
   console.log('Container origin, restart, replacement, saved seat and HTTP integration checks passed.');
 } catch (error) {
-  annotateFailure(String(error?.message ?? error).split('\n')[0]);
+  annotateFailure(stage === 'administrator HTTP acceptance'
+    ? 'Administrator HTTP acceptance failed; see sanitized details below.'
+    : String(error?.message ?? error).split('\n')[0]);
   if (stage === 'administrator HTTP acceptance') {
     try {
       const report = JSON.parse(readFileSync(joinPath(adminFiles, 'http/report.json'), 'utf8'));
       const request = report.failureRequest ?? report.lastRequest;
-      if (request) annotateFailure(`${request.path} returned ${request.status}; ${report.failureLocation ?? 'see the failed acceptance check'}`);
+      const detail = describeFailure(request, report.failureLocation);
+      if (detail) annotateFailure(detail);
     } catch { /* Early failures may not create the private report; the original error remains fatal. */ }
   }
   try { console.error(docker('logs', name).replaceAll(/dune-admin\.[0-9a-f-]{36}\.[0-9a-f]{64}/g, '[REDACTED ADMIN KEY]')); } catch { /* May not exist yet. */ }