Fix Playwright BASE_URL handling and failed UAT report tests

tests/document-security-deep.spec.js

@@ -1,6 +1,7 @@
 
 const { test, expect } = require('@playwright/test');
 require('dotenv').config();
+const { BASE_URL, absoluteUrl } = require('../fixtures/url');
 const { login } = require('../fixtures/auth');
 const { expectNoBackendError, readBody, blockedOrNotFound } = require('../fixtures/v204-helpers');
 const { expectBlockedOrSafe } = require('../fixtures/assertions');
@@ -31,7 +32,7 @@ async function expectPublicNoSensitive(page) {
 }
 
 async function apiCall(request, method, route) {
-  const url = `${process.env.BASE_URL}${route}`;
+  const url = absoluteUrl(route);
   const opts = { data: { csrf_token: '', test_payload: 'uat-vapt' }, headers: { 'Content-Type': 'application/json' } };
   if (method === 'GET') return await request.get(url).catch(() => null);
   if (method === 'POST') return await request.post(url, opts).catch(() => null);