nightly: gate 8 more load-dependent network tests (round 2)

tests/zz_enterprise_gate_test.go

@@ -564,6 +564,7 @@ func TestAdminDeregister(t *testing.T) {
 // TestClearKeyExpiry verifies that a key expiry can be cleared, re-enabling
 // heartbeats that would otherwise be blocked.
 func TestClearKeyExpiry(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 
 	clk := newTestClock()
@@ -4476,6 +4477,7 @@ func TestJoinMaxMembersEnforced(t *testing.T) {
 // TestRegistryWebhookDispatch verifies that the registry dispatches audit events
 // to a configured webhook URL.
 func TestRegistryWebhookDispatch(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 
 	// Collect webhook events
@@ -4612,6 +4614,7 @@ func TestRegistryWebhookRequiresAdmin(t *testing.T) {
 // - ExternalID persistence across restart
 // - Backwards compatibility (old nodes without identity still work)
 func TestExternalIdentityIntegration(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 
 	tmpDir, err := os.MkdirTemp("/tmp", "w4-identity-")

tests/zz_eventstream_broker_parity_test.go

@@ -206,6 +206,7 @@ func TestBrokerParityNormal(t *testing.T) {
 // We assert: delivered < 400 (rate-limit fired) AND delivered ≥ 150
 // (burst was honored — not catastrophically dropping everything).
 func TestBrokerParityRateLimit(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 	env := NewTestEnv(t)
 
@@ -744,6 +745,7 @@ func TestBrokerParityLockContention(t *testing.T) {
 // publishes 5 events. The webhook collector must observe 5
 // pubsub.published events for our topic.
 func TestBrokerParityWebhooks(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 	collector := newWebhookCollector()
 	defer collector.Close()

tests/zz_handshake_test.go

@@ -15,6 +15,7 @@ import (
 )
 
 func TestHandshakeMutualAutoApprove(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 	// Two nodes send handshake requests to each other → auto-approved (mutual)
 
@@ -257,6 +258,7 @@ func TestHandshakePendingApproveReject(t *testing.T) {
 }
 
 func TestHandshakeNetworkTrust(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 	// Two nodes on the same non-backbone network should auto-approve handshakes
 
@@ -358,6 +360,7 @@ func TestHandshakeNetworkTrust(t *testing.T) {
 
 // TestHandshakeRevokeTrust verifies trust can be revoked after being established.
 func TestHandshakeRevokeTrust(t *testing.T) {
+	requireRealNetwork(t)
 	t.Parallel()
 	env := NewTestEnv(t)