Add an end-to-end test for the reputation publishing pipeline

[collinsadi]

The full reputation path — leaf submission, publisher tick, on-chain root update, proof generation, contract verification — is only exercised in pieces; no automated test crosses the service boundary.

Automate the pipeline end to end against a sandboxed deployment.

Acceptance criteria:

• The test submits a leaf, waits for publication, proves, and verifies on-chain.
• Failures identify which stage broke.
• Runtime is bounded and the test is documented as a release gate alongside the pool flow test.