Test secure guest booking access

This owner-only test saves one fictional booking, checks access-link protection, then removes the test records. It does not send an email, take payment or reserve a place.

Passed: fictional booking saved and read back; wrong guest, reused link, expired and revoked access rejected; both test records removed. Further test writes are disabled.