Unify K1 discovery ownership and verification across enrollment paths

apps/control-station/test/devicePluginFrontendBoundary.test.mjs

@@ -260,7 +260,8 @@ test("K1 connection surface enforces one scan, local selection, and one Apply",
   assert.doesNotMatch(provisioning, /allow_host_wifi_switch/);
   assert.doesNotMatch(provisioning, /(?:color|background(?:-color)?):\s*(?:#[0-9a-f]{3,8}|rgba?\()/i);
   for (const sharedControl of ["Button", "IconButton", "TextField", "ActivityIndicator", "StatusBadge"]) {
-    assert.match(provisioning, new RegExp(`<${sharedControl}\\b`), sharedControl);
+    const password = readFileSync(join(pluginFrontendRoot, "components/K1WifiPasswordField.tsx"), "utf8");
+    assert.match(provisioning + password, new RegExp(`<${sharedControl}\\b`), sharedControl);
   }
   assert.doesNotMatch(
     provisioning,
@@ -736,7 +737,7 @@ test("K1 provisioning keeps the operator draft separate from the backend lease",
   assert.match(provisioning, /scanWithResult\(\{ durationSeconds: BLE_DISCOVERY_TIMEOUT_SECONDS \}\)/);
   assert.match(
     provisioning,
-    /onChange=\{\(event\) => setPassword\(event\.target\.value\)\}/,
+    /<K1WifiPasswordField[\s\S]*?onChange=\{setPassword\}/,
   );
 });