fix(CI): Keycloak health check uses unmapped port 9000

[prodnull]

Problem

CI integration tests fail with {"error":"request_failed"} from Keycloak.

Root Cause

wait-for-healthy.sh checks port 9000 (/health/ready) but docker-compose.test.yaml only maps 8080. Health check silently fails, tests start before realm import completes.

Fix

Change health check to curl -sf http://localhost:8080/realms/prmana-test (validates realm is imported, not just Keycloak running).

Pre-existing — not caused by OSS/enterprise refactor.