test(e2e): allow startup rejection ordering

Signed-off-by: Piotr Mlocek <pmlocek@nvidia.com>

Author: pimlock

e2e/rust/tests/policy_activation.rs

@@ -317,10 +317,14 @@ binaries:
         String::from_utf8_lossy(&logs.stderr)
     );
     assert_eq!(
-        logs.matches("OCSF CONFIG:FAIL_CLOSED").count(),
+        logs.matches("OCSF CONFIG:CONFIGURATION_ERROR").count(),
         1,
         "unchanged startup rejection must be logged only once: {logs}"
     );
+    assert!(
+        logs.matches("OCSF CONFIG:FAIL_CLOSED").count() <= 1,
+        "unchanged startup rejection must enter fail-closed at most once: {logs}"
+    );
     assert!(logs.contains("credentialed endpoint 'api.example.com:443'"));
     assert!(!logs.contains("Creating OPA engine from proto policy data"));
     let repaired = context.path().join("repaired.yaml");