chore(e2e): no committed default for the E2E account password

The localdev e2e account's password was a hard-coded default in this public repo, so it
was never a credential. E2E_PASSWORD is now required; the ops wrapper exports it from
the secret store, and the seed/setup fail with a clear message when it is missing.

scripts/e2e_seed.py

@@ -9,7 +9,8 @@ golden-master net is deterministic and never touches a real account. Self-healin
 spec that left the account dirty is cleaned on the next run. Prints one JSON line describing
 what it seeded (the wrapper / global-setup reads it).
 
-Credentials come from env (E2E_EMAIL / E2E_PASSWORD) with local-only defaults; the account
+Credentials come from env: E2E_EMAIL (default e2e@siftlode.local) and E2E_PASSWORD (REQUIRED, no
+default — the ops wrapper exports it from the secret store); the account
 lives only in the localdev DB.
 """
 
@@ -36,7 +37,11 @@ from app.models import (  # noqa: E402
 from app.security import hash_password  # noqa: E402
 
 EMAIL = os.environ.get("E2E_EMAIL", "e2e@siftlode.local")
-PASSWORD = os.environ.get("E2E_PASSWORD", "e2e-golden-master")
+PASSWORD = os.environ.get("E2E_PASSWORD", "")
+if not PASSWORD:
+    sys.exit(
+        "e2e_seed: E2E_PASSWORD is not set (no default by design) — run it via `siftlode e2e-seed`"
+    )
 N_SUBS = 3