Finalize nx9-wg production release

scripts/test-native-integration.sh

@@ -154,9 +154,14 @@ log_pass "Pre-flight baseline captured in ${BASELINE_DIR}"
 # ----------------------------------------------------------------------------
 section "02 — SQLite Store Initialization"
 
+TEMP_ADMIN_PW="$(head -c 24 /dev/urandom | base64 | tr -dc 'A-Za-z0-9!@#%^&*_-' | head -c 20)"
+PW_FILE="${TEST_ROOT}/admin_pw.txt"
+echo -n "${TEMP_ADMIN_PW}" > "${PW_FILE}"
+chmod 0600 "${PW_FILE}"
+
 "${BIN}" --data-dir "${DATA_DIR}" --database "${DB_PATH}" init \
     --username "admin" \
-    --password "AdminPassword123!" >/dev/null
+    --password-file "${PW_FILE}" >/dev/null
 
 if [[ -f "${DB_PATH}" ]]; then
     log_pass "SQLite authoritative store created and migrated"
@@ -288,7 +293,7 @@ all_dumps="${TEST_ROOT}/all_dumps.txt"
 "${BIN}" --data-dir "${DATA_DIR}" --database "${DB_PATH}" --json reconcile plan >> "${all_dumps}" 2>&1 || true
 "${BIN}" --data-dir "${DATA_DIR}" --database "${DB_PATH}" --json diagnostics all >> "${all_dumps}" 2>&1 || true
 
-if grep -q "AdminPassword123!" "${all_dumps}"; then
+if grep -F -q "${TEMP_ADMIN_PW}" "${all_dumps}"; then
     log_fail "Plaintext administrator password found in command output"
 else
     log_pass "Zero plaintext passwords leaked in CLI/diagnostics output"