auth: drop test-only seam setter, dedup repo_token test setup

Review cleanup: in-package tests swap the resolveContextForCluster var directly (matching data_api_test's stub idiom), so the production setter goes away; the duplicated store-sandboxing lines move into one helper.