REST API Fixtures Need a Cleanup Contract

A backend pattern for isolating authentication test mailboxes with PostgreSQL ownership, bounded cleanup, and repeatable REST API runs.