test(19.7-05): framework unit tests for every validation row and the gate's admin stage

- pier: TestCatalog, TestDispatch, TestGuardRules, TestSessions (Redis
  across two instances and the memory store), TestFanOut; the store clock
  and stateless-server seams in export_test.go
- surf: TestStreamingRoute (throttle, CORS profile and access-log pattern on
  a stream route) and TestPierMount in both builds; the streaming smoke
  restores the mount hook it replaces
- wristband TestMCPScopes; cabana TestAccountContributions (Postgres part:
  transaction and unchanged My account payloads), TestRecordActionPrompt,
  TestScopeLimitForMethods; TestRecordActionPromptRun pins the empty Value
  of an action without a prompt
- vitest: 403 and failed-load cases for My account contributions, the
  cancelled prompt
- gate: every name required (tagged runs included), account.go unchanged
  since 51d088a, admin stage live

admin/tests/account/AccountContributions.test.ts

@@ -122,4 +122,23 @@ describe('My account contributions', () => {
     expect(toasts.value.map((toast) => [toast.text, toast.tone])).toEqual([['This action no longer applies.', 'danger']])
     expect(requestsTo(calls, 'GET', CONTRIBUTIONS)).toHaveLength(2)
   })
+
+  it("403 shows the server's message as a danger toast and keeps the list", async () => {
+    const { wrapper, calls } = await openAccount({
+      [`POST ${OPEN}`]: { status: 403, body: { error: { code: 'forbidden', message: 'You may not link this account.', details: {} } } },
+    })
+    await wrapper.find('[data-account-contribution-action="open"]').trigger('click')
+    await flushPromises()
+    expect(toasts.value.map((toast) => [toast.text, toast.tone])).toEqual([['You may not link this account.', 'danger']])
+    expect(requestsTo(calls, 'GET', CONTRIBUTIONS)).toHaveLength(1)
+    expect(wrapper.find('[data-account-contribution-url]').exists()).toBe(false)
+  })
+
+  it('a failed list load renders no card and leaves the rest of My account', async () => {
+    const { wrapper } = await openAccount({
+      [`GET ${CONTRIBUTIONS}`]: { status: 500, body: { error: { code: 'server_error', message: 'Server error', details: {} } } },
+    })
+    expect(wrapper.findAll('[data-account-contribution]')).toHaveLength(0)
+    expect(wrapper.find('[data-api-tokens]').exists()).toBe(true)
+  })
 })