Security Journey (Tests\E2E\SecurityJourney)
 [x] Unauthenticated requests are refused
 [x] Missing permission is refused and audited
 [x] Another port sees nothing of this dossier
 [x] Forbidden transitions and immutability
 [x] Finished and cancelled dossiers refuse writes
 [x] Synchronisation replay is idempotent
 [x] Suspended account and revoked device lose access

