fix: set API routes before addInitScript to ensure proper interception

test-framework/dev-audit/forms/forms.spec.ts

@@ -15,10 +15,6 @@ test.describe('表单验证测试', () => {
   test('联系表单 - 有效数据提交', async ({ page }) => {
     const contactPage = new ContactPage(page);
 
-    await page.addInitScript(() => {
-      sessionStorage.setItem('csrf_token', 'test-csrf-token');
-    });
-
     await page.route('**/api/contact', async route => {
       await route.fulfill({
         status: 200,
@@ -27,6 +23,10 @@ test.describe('表单验证测试', () => {
       });
     });
 
+    await page.addInitScript(() => {
+      sessionStorage.setItem('csrf_token', 'test-csrf-token');
+    });
+
     await contactPage.navigate();
     await contactPage.fillContactForm({
       name: formData.valid.name,
@@ -92,10 +92,6 @@ test.describe('表单验证测试', () => {
   test('联系表单 - API错误处理', async ({ page }) => {
     const contactPage = new ContactPage(page);
 
-    await page.addInitScript(() => {
-      sessionStorage.setItem('csrf_token', 'test-csrf-token');
-    });
-
     await page.route('**/api/contact', async route => {
       await route.fulfill({
         status: 500,
@@ -104,6 +100,10 @@ test.describe('表单验证测试', () => {
       });
     });
 
+    await page.addInitScript(() => {
+      sessionStorage.setItem('csrf_token', 'test-csrf-token');
+    });
+
     await contactPage.navigate();
     await contactPage.fillContactForm({
       name: formData.valid.name,