fix: poll /health during pentest server startup

sleep 3 was too tight on cold CI runners — tailwind CSS build
and Deno cache warmup push server boot past 3s. Use the existing
wait_for_service helper (up to 30s) so we only fail when the
server genuinely can't start.

Co-Authored-By: Claude Opus 4 <noreply@anthropic.com>

Author: motxx

scripts/test-all.sh

@@ -75,11 +75,10 @@ run_pentest() {
   HTTP_API_KEYS=pentest-key-001 PORT=$port \
     deno run --allow-all src/infrastructure/server.ts &
   local server_pid=$!
-  sleep 3
 
-  # Verify server is up
-  if ! curl -sf "http://localhost:$port/health" > /dev/null 2>&1; then
-    echo "  Server failed to start on port $port"
+  # Poll /health for up to 30s — CI cold-start (tailwind CSS build + Deno cache)
+  # can exceed 3s on a fresh runner.
+  if ! wait_for_service "pentest server" "http://localhost:$port/health" 15; then
     kill $server_pid 2>/dev/null || true
     fail "pentest server start"
     return