SEP-1936: Fix the signed-URL test assertion that flakes across an itsdangerous timestamp boundary

[peter-o-addo]

Summary

Compare decoded itsdangerous payloads instead of raw signed URLs in snippet execution-meta equality checks so tests no longer flake across a second boundary.

• tests/app/sep/snippets/test_script_source.py: decode snippet_source before comparing metas in the legacy-path and extra-args alias tests

Tested

Skip test

Checklist

• New/modified functions have type hints and rST docstrings
• New tests added for new features or bug fixes
• All tests pass locally (make test)
• Pre-commit hooks pass (make run-pre-commit)
• Database migrations generated if models changed (make makemigrations)
• User-facing changes documented (README, inline help, UI text)
• Configuration changes documented with examples
• Changelog fragment added under changelog.d/ if the change is user-facing (make changelog-add), or confirmed N/A (internal-only change, or a same-release-cycle fix for an unreleased sibling ticket)

[Copilot]

🟡 Changes recommended

The normalization unintentionally removes URL base-path coverage from the parity assertions.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Prevents signed-URL test flakes by comparing decoded token payloads instead of timestamp-sensitive URLs.

Changes:

• Adds signed-token decoding helpers.
• Updates two execution-metadata equality assertions.

File summaries

File	Description
tests/app/sep/snippets/test_script_source.py	Normalizes signed URLs in metadata comparisons.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 3
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

🟡 Changes recommended

The new helpers need complete docstrings and should avoid duplicating the artifact route literal.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Review details

Suppressed comments (1)

tests/app/sep/snippets/test_script_source.py:107

• This new helper's docstring does not document its meta parameter or returned dump, leaving the helper contract incomplete. Expand it with the corresponding rST fields.

def _meta_dump_decoded(meta: SnippetExecutionMeta) -> dict[str, object]:
    """Return ``meta.model_dump()`` with ``snippet_source`` timestamp-normalized."""

• Files reviewed: 1/1 changed files
• Comments generated: 2
• Review effort level: Balanced

[Copilot]

🟢 Approval recommended

The focused test-only change removes timestamp sensitivity while preserving meaningful URL and payload validation.

Review details

• Files reviewed: 1/1 changed files
• Comments generated: 0 new
• Review effort level: Balanced

[github-actions]

Coverage report

This PR does not seem to contain any modification to coverable code.