test(e2e): reject failed hosted reachability probes

Signed-off-by: Carlos Villela <cvillela@nvidia.com>

Author: cv

test/e2e-scenario/live/hermes-e2e.test.ts

@@ -286,8 +286,12 @@ test.skipIf(!shouldRunLiveE2EScenarios())(
         timeoutMs: 30_000,
       },
     );
+    const reachabilityStatus = providerReachability.stdout.trim();
     expect(providerReachability.exitCode, resultText(providerReachability)).toBe(0);
-    expect(providerReachability.stdout.trim(), resultText(providerReachability)).not.toBe("000");
+    expect(["000", "401", "403"], resultText(providerReachability)).not.toContain(
+      reachabilityStatus,
+    );
+    expect(Number(reachabilityStatus), resultText(providerReachability)).toBeLessThan(500);
 
     // Phase 2: real installer + non-interactive Hermes onboard.
     const install = await host.command("bash", ["install.sh", "--non-interactive"], {

test/e2e-scenario/live/sandbox-survival.test.ts

@@ -126,8 +126,10 @@ test.skipIf(!shouldRunLiveE2EScenarios())(
         timeoutMs: 25_000,
       },
     );
+    const reachabilityStatus = endpointReachable.stdout.trim();
     expect(endpointReachable.exitCode, resultText(endpointReachable)).toBe(0);
-    expect(endpointReachable.stdout.trim(), resultText(endpointReachable)).not.toBe("000");
+    expect(["000", "401", "403"], resultText(endpointReachable)).not.toContain(reachabilityStatus);
+    expect(Number(reachabilityStatus), resultText(endpointReachable)).toBeLessThan(500);
     expect(fs.existsSync(path.join(REPO_ROOT, "install.sh"))).toBe(true);
 
     await host.bestEffortCleanupSandbox(SANDBOX_NAME, {