test(plugin-security): pin the Layer 0 tenant wall on the stored row (failing first)

Measurement on the base, isolated posture, driver-sql and driver-sqlite-wasm:
a beforeInsert/beforeUpdate hook that writes organization_id outside the
caller's organization scope is admitted on a by-id update, an insert, an
array insert and a predicate update, and the row is stored there. A supplied
out-of-scope value is refused before next(), as the controls show.

Claude-Session: https://claude.ai/code/session_01Evb5jFDZGKQE9KG4jbMfMF
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude