tests(portal): refresh keycloak token during e2e

scripts/tests/test_portal_onboarding_flow.py

@@ -300,6 +300,9 @@ def main() -> int:
             raise SystemExit(f"timed out waiting for provisioning to finish (last status={last_status}){suffix}")
         time.sleep(interval_s)
 
+    # Refresh admin token (it may expire during the provisioning wait).
+    token = _keycloak_admin_token(keycloak_base, realm, kc_admin_client_id, kc_admin_client_secret)
+
     user = _keycloak_find_user(keycloak_base, realm, token, username)
     if not user:
         raise SystemExit("expected Keycloak user was not created")