test: cover the chat access policy and bootstrap guards

ChatAccess admits only chat-group members to context bm/1 and manages
nothing; the chat context oversees nothing and its loader knows only
id 1; /chat and /chat/members need a caller and a database. The
migration count rises to 15 for the chat group seed.

controllers/api/handlers_test.go

@@ -55,6 +55,8 @@ func handlers(h *api.Handlers) map[string]http.HandlerFunc {
 		"feed-put":  h.UpdateCalendarFeed,
 		"rotate":    h.RotateCalendarFeed,
 		"feed-del":  h.DeleteCalendarFeed,
+		"chat":      h.Chat,
+		"chat-mem":  h.ChatMembers,
 	}
 }