Fix a transient spec failure
The spec was relying on a sorting by created_at
but it's possible 2 MRs could be created with the same timestamp.
I've changed the spec to expect that the response includes the IID of the 3 MRs, not only the first one (which depended on the sorting).
Closes #24772 (closed) /cc @jameslopez