test(10-05): cover every Phase 10 Go change with branch-level tests

- bouncer TestPhase10CookieGuard: cookie read without Bearer, Bearer wins,
  empty cookie, frontend audience and blacklisted jti rejected
- boardwalk TestPhase10BoardwalkServing: HEAD, query strings, encoded
  traversal, index by name, nested prefix, MIME fallback, constructor errors
- cabana TestPhase10Coverage: mounted unsafe routes vs the CSRF walk, option
  and filter edges, read-only labels, relation message defaults, bundle
  fallback locale, cookie refresh of an expired token in the refresh window
- phrasebook override precedence, new locale, Bundle merge order, Forms shapes
- surf prefix collision for deeper paths and the default /backend prefix
- swagger2openapi TestUnionRewrite and converter branch tests
- framework tests no longer name the application (acme fixtures instead)

bouncer/registry_test.go

@@ -47,7 +47,7 @@ func TestDuplicateGuardNameFailsWithPluginAndName(t *testing.T) {
 	if err := reg.Register("golem15.user", "jwt", writerGuard{}); err != nil {
 		t.Fatal(err)
 	}
-	err := reg.Register("golem15.fonoteka", "jwt", writerGuard{})
+	err := reg.Register("golem15.acme", "jwt", writerGuard{})
 	if err == nil || !strings.Contains(err.Error(), "golem15.user") || !strings.Contains(err.Error(), "jwt") {
 		t.Fatalf("want plugin and guard name in error, got %v", err)
 	}
@@ -102,7 +102,7 @@ func TestWriterGuardFailureWritesOwnResponse(t *testing.T) {
 func TestCredentialGuardSoftFailAndSuccess(t *testing.T) {
 	reg := NewRegistry()
 	failing := credOnlyGuard{err: errors.New("bad token")}
-	if err := reg.Register("golem15.fonoteka", "inv_token", failing); err != nil {
+	if err := reg.Register("golem15.acme", "inv_token", failing); err != nil {
 		t.Fatal(err)
 	}
 	mw, err := reg.Middleware("inv_token")
@@ -135,7 +135,7 @@ func TestCredentialGuardSoftFailAndSuccess(t *testing.T) {
 	okReg := NewRegistry()
 	token := &struct{ ID uint }{ID: 9}
 	principal := &Principal{ID: 3}
-	if err := okReg.Register("golem15.fonoteka", "inv_token", credOnlyGuard{
+	if err := okReg.Register("golem15.acme", "inv_token", credOnlyGuard{
 		principal: principal,
 		cred:      token,
 	}); err != nil {