test: add idor-unscoped-account fixture (CWE-639)

[ezequiellich44-cmd]

Adds a Python test case for CWE-639 (insecure direct object reference) covering record lookups keyed only on request ids, with owner-scoped safe counterparts. Catalog regenerated; corpus safety checks pass.

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #193, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193, #192, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193, #192, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Remaining in queue after this one: #196, #195, #193, #192, #191, #190, #188, #187

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

All checks green (5/5). Ready for merge. Same verified pattern as #182 which just merged. Queue: #183, #184, #185, #187, #188, #190, #191, #192, #193, #195

[ezequiellich44-cmd]

Rebased onto current master and the catalog was regenerated. Conflicts resolved; PR is mergeable again.

[ezequiellich44-cmd]

Rebased again onto current master (now includes the new \corpus safety rules\ CI). Catalog regenerated; both \corpus safety rules\ and \ hreatcrush security scan\ pass. PR is mergeable.

[ezequiellich44-cmd]

Rebased onto upstream/master; only the fixture + regenerated catalog are in the diff. All checks green.