test(podman): lift e2e exclusions to probe the tmachine guest

Diagnostic only, not for merge. Removes 14 binaries from podmanE2eFollowUpBinaries so one rootless tmachine run reports how each behaves in the guest, for the exclusion-list retirement tracked in #3712.

Signed-off-by: politerealism <burdcat17@gmail.com>

Author: politerealism

tests/artifacts.nix

@@ -96,41 +96,18 @@ let
     output = "artifacts/test-archives/${muslToolchain.target}/provider-refresh-keycloak-tests.tar";
   };
 
-  # Follow-up: migrate these wrapper-coupled tests once tmachine provides their
-  # managed-gateway controls, SPIFFE fixtures, caller driver-config setting,
-  # guest tools, and matching workload-image identity behavior. The corporate
-  # proxy and gateway-start binaries currently self-skip without wrapper-owned
-  # gateway metadata, so exclude them rather than report false passes.
+  # DIAGNOSTIC PROBE, NOT FOR MERGE (#3712): most exclusions are lifted so one
+  # tmachine run reports how each binary behaves in the rootless Fedora guest.
+  # Still excluded: the gateway-restart binaries (they self-skip without
+  # wrapper-owned gateway metadata, which tmachine does not set, so they would
+  # report false passes), provider_token_exchange (needs wrapper-set SPIFFE
+  # fixtures), and provider_auto_create / workspace_lifecycle (migrated in #4246).
   podmanE2eFollowUpBinaries = [
-    "credential_gating"
-    "driver_config_volume"
-    "forward_proxy_graphql_l7"
-    "forward_proxy_jsonrpc_l7"
-    "forward_proxy_l7_bypass"
-    "host_gateway_alias"
-    "landlock"
     "local_driver_token_restart"
-    # Standalone tmachine runs can time out while opening the localhost relay.
-    # Follow up on making the relay setup deterministic before restoring it.
-    "no_proxy"
     "podman_corporate_proxy"
     "podman_gateway_start"
-    "podman_oci_identity"
     "provider_auto_create"
-    # The provider-refresh feature suite covers revoked Keycloak grants. This
-    # binary instead covers stable workload handles across repeated rotations
-    # and explicit refresh reconfiguration in a long-running sandbox.
-    "provider_refresh_handles"
     "provider_token_exchange"
-    "proxy_egress_pipeline"
-    # Conformance covers stop/start workspace preservation and deletion while
-    # stopped. The remaining canonical-main, TTY, attachment replay, and
-    # no-keep cases still need migration. Nextest archive filters cannot select
-    # individual tests, so keep the complete binary in the follow-up bucket.
-    "sandbox_lifecycle"
-    # Needs a prebuilt musl DNS probe in guest artifact mode; tracked in #3009.
-    "transparent_tcp"
-    "websocket_conformance"
     "workspace_lifecycle"
   ];
   podmanE2eArchiveFilter =