Epic: Testing & Documentation

## Description

Right now test reliability suffers from flaky selectors and misleading comments, while documentation has gaps and contradictions — policy tests use broad locators that match multiple elements, test comments claim to remove limits but don't, `CLAUDE.md` is missing **MCP resources**, and `rbac.md` describes behavior that contradicts the implementation. Tests fail for the wrong reasons, and docs mislead contributors.

This epic tightens test reliability and doc accuracy — scoped selectors that target specific elements, comments that match what the code actually does, complete resource lists in CLAUDE.md, and rbac.md that documents real behavior. Tests become stable, and docs become trustworthy.

Start by separating the policy-test reliability work from the documentation updates described in the issue. Review the policy tests, CLAUDE.md, and rbac.md; done means selectors target specific elements, comments match behavior, MCP resources are listed, and rbac.md agrees with the implementation.

Written by the indexing model from the issue text.