Description:
Harden privileged governance actions against bypass attempts.
Tasks:
- Add tests for unauthorized queue/execute/cancel/veto/approval calls
- Add tests for bypass attempts around timelock and threshold checks
- Add tests for duplicate approval and duplicate voting edge cases
Acceptance Criteria:
Privilege paths are locked down with comprehensive negative tests.