662dd1b958
Add GalaxyRepositoryHostWiringTests.BrowseChildren_BrowseSubtreesConstraintThroughHostWiring_FiltersChildren: constructs the real GatewayRequestIdentityAccessor + GatewayBrowseScopeProvider, passes the provider as IGalaxyBrowseScopeProvider to the lib GalaxyRepositoryGrpcService, and asserts two children (unconstrained) then empty (BrowseSubtrees=["NonExistent"]) — proving the full production authz-filtering chain is correctly wired. Strengthen DashboardSnapshotServiceTests.GetSnapshot_ProjectsGalaxySummaryFromHierarchyCache: add Assert.Equal(2, TopTemplates.Count) and Assert.Contains($Area, InstanceCount==1) so the test guards the complete summary output, not just the $Pump entry.