Security Journey (Tests\E2E\SecurityJourney)

• Unauthenticated requests are refused
• Missing permission is refused and audited
• Another port sees nothing of this dossier
• Forbidden transitions and immutability
• Finished and cancelled dossiers refuse writes
• Synchronisation replay is idempotent
• Suspended account and revoked device lose access