Migrate E2E tests from Incidents to Cases before March 9, 2026

[mraible]

E2E tests currently navigate to Next-Gen SIEM > Incidents to test the OpenRouter Toolkit extension. However, Incidents will be retired on March 9, 2026.

Action Required:
Migrate E2E tests to use Cases instead of Incidents before the retirement date.

Why Cases aren't used now:
The test environment currently has no cases created ("No cases have been created yet" message appears), preventing E2E tests from accessing the Workbench view where the extension is embedded. Incidents currently contain test data that allows extension testing to proceed.

Affected Files:

• e2e/src/pages/SocketNavigationPage.ts - Line 91: Uses text="Incidents"
• e2e/src/pages/OpenRouterToolkitPage.ts - Comments reference incidents
• e2e/tests/foundry.spec.ts - Line 26: Validates /xdr/incidents URL

Test Requirements:

• Test environment needs sample cases with data
• Cases must support the Workbench view with graph visualization
• Extension socket ngsiem.workbench.details must work with Cases