test(functional-tests): Add functional test for the Free Access Program

Because:

* The Free Access Program (PAY-3780) grants subscription capabilities to
  users configured in Strapi without an actual subscription, and there was
  no automated coverage confirming the capability is broadcast.

This commit:

* Adds a functional test that provisions the configured free-access
  account and asserts the auth-server profile returns the `123donePro`
  capability under `subscriptionsByClientId`.
* Sources the account password from FREE_ACCESS_PROGRAM_PWD (skips when
  unset) and skips in production, since the feature relies on
  environment-specific Strapi configuration.

Closes PAY-3781

Author: StaberindeZA

packages/functional-tests/tests-payments-next/free-access-program.spec.ts

@@ -0,0 +1,66 @@
+/* This Source Code Form is subject to the terms of the Mozilla Public
+ * License, v. 2.0. If a copy of the MPL was not distributed with this
+ * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
+
+import { expect, test } from '../lib/fixtures/payments';
+
+const FREE_ACCESS_EMAIL = '123donefreeaccess@restmail.net';
+const FREE_ACCESS_CAPABILITY = '123donePro';
+const FREE_ACCESS_PASSWORD = process.env.FREE_ACCESS_PROGRAM_PWD;
+
+test.describe('severity-2 #smoke', () => {
+  test.beforeEach(async ({}, { project }) => {
+    test.skip(
+      project.name.includes('production'),
+      'Free Access Program relies on non-production Strapi configuration'
+    );
+    test.skip(
+      !FREE_ACCESS_PASSWORD,
+      'FREE_ACCESS_PROGRAM_PWD is not set; required to provision the free-access account'
+    );
+  });
+
+  test('grants the 123donePro capability via the auth-server profile', async ({
+    target,
+    testAccountTracker,
+  }) => {
+    // Guaranteed set by the beforeEach skip above.
+    const password = FREE_ACCESS_PASSWORD as string;
+
+    // Self-provision the fixed free-access account: sign in if it already
+    // exists, otherwise create it (pre-verified).
+    const { exists } = await target.authClient.accountStatusByEmail(
+      FREE_ACCESS_EMAIL,
+      {},
+      target.ciHeader
+    );
+
+    const credentials = exists
+      ? await target.authClient.signIn(
+          { primary: FREE_ACCESS_EMAIL, original: FREE_ACCESS_EMAIL },
+          password,
+          {},
+          target.ciHeader
+        )
+      : await target.createAccount(FREE_ACCESS_EMAIL, password);
+
+    // Track for automatic teardown so each run starts from a clean slate.
+    testAccountTracker.accounts.push({
+      email: FREE_ACCESS_EMAIL,
+      password,
+    });
+
+    const profile = await target.authClient.accountProfile(
+      credentials.sessionToken,
+      target.ciHeader
+    );
+
+    // `subscriptionsByClientId` maps each client id to its capability slugs;
+    // the free-access grant appears here even without a subscription.
+    const capabilities = Object.values(
+      profile.subscriptionsByClientId ?? {}
+    ).flat();
+
+    expect(capabilities).toContain(FREE_ACCESS_CAPABILITY);
+  });
+});