e2e: keep the evidence when a mesh test fails

The harness already dumps container logs to tests/e2e/logs/ for tests
that did not complete, but CI only uploaded ./_artifacts, which bats
never populates - so the a2a label-gate flake left nothing to diagnose.
Upload the dump directory, and print node-1's [A2A] gate verdicts inline
when the labelled send fails, since that gate fail-closes transient
handshake errors into the same 403 as a policy denial.

Author: aojea

.github/workflows/e2e.yml

@@ -77,4 +77,8 @@ jobs:
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: e2e-logs-${{ env.JOB_NAME }}-${{ github.run_id }}
-          path: ./_artifacts
+          # tests/e2e/logs is where the bats harnesses dump container logs
+          # for tests that did not complete (see mesh_cleanup_test_resources).
+          path: |
+            ./_artifacts
+            ./tests/e2e/logs

tests/e2e/a2a_mesh.bats

@@ -87,6 +87,10 @@ teardown() {
     -e SAM_REQUIRED_LABELS="region=eu" \
     "${A2A_ECHO_IMAGE}" python3 /workspace/client.py "${mesh_base}" "hello eu"
   echo "labelled client output: $output"
+  if [[ "$status" -ne 0 ]]; then
+    echo "node-1 label gate verdicts:"
+    docker logs "${MESH_PREFIX}-node-1" 2>&1 | grep -F '[A2A]' || true
+  fi
   [[ "$status" -eq 0 ]]
   [[ "$output" == *"agent> echo: hello eu"* ]]