QA-2420: add OrganizationCardCipherScene to the seeder

[awiester-bw]

🎟️ Tracking

QA-2420: https://bitwarden.atlassian.net/browse/QA-2420

📔 Objective

The seeder can create org-owned login ciphers but has no way to create an org-owned card cipher; card seeding exists user-side only. This blocks per-test seeding for the org ClientEvents card tests, whose cases view and edit a card in an org collection and need one already seeded. This adds OrganizationCardCipherScene, mirroring UserCardCipherScene for the card fields and OrganizationLoginCipherScene for owner resolution and collection-aware persistence: it resolves the org, encrypts the card with the org key (OrganizationId set, UserId null), and writes it to the requested collections through CreateAsync(cipher, collectionIds). CardCipherSeeder already produces an org-key card, so it is unchanged. The reflection-based scene registration picks the scene up automatically by class name.

Includes a factory unit test that seeds an org card with a generated org key and asserts ownership (Card type, OrganizationId set, UserId null) plus per-field decryption back to plaintext with the org key. Verified by a passing build (0 errors) and the code-review and security-review agent passes.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 63.76%. Comparing base (2142748) to head (fd0eea4).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8294      +/-   ##
==========================================
- Coverage   63.77%   63.76%   -0.01%     
==========================================
  Files        2470     2470              
  Lines      105918   105918              
  Branches     9596     9596              
==========================================
- Hits        67544    67543       -1     
- Misses      36054    36055       +1     
  Partials     2320     2320              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🤖 Bitwarden Claude Code Review

Overall Assessment: APPROVE

Re-reviewed after the force-push; the changeset is now a single new file, util/Seeder/Scenes/OrganizationCardCipherScene.cs. The scene matches OrganizationLoginCipherScene for org lookup, null-check, and CreateAsync(cipher, collectionIds) persistence, and UserCardCipherScene for card field construction — OrganizationId is set with UserId null, and the org key is the only key passed to CardCipherSeeder.Create, so no plaintext vault data reaches the database. Notes and Reprompt travel the same CipherSeed → CipherViewDto → EncryptedCipherDto → entity path the pipeline fixtures already use, and reading cipher.Id after CreateAsync is correct because SetNewId() mutates the same instance before the insert. The previously flagged CardCipherSeederTests.cs was removed at the reviewer's request, so that thread is resolved; scene registration is reflection-based and no Seeder doc catalogs individual cipher scenes, so neither DI nor docs need updating.

Code Review Details

No findings.

[theMickster]

The Claude Code Comment here is the one fix to the PR that we should make. Otherwise, I'm good with the code.