fix(test): admin_is_implicit_app_admin uses force=true on app delete

The test creates a script in the default app earlier in the body, so a
plain DELETE /apps/default hits the soft no-cascade guard and 409s
before the capability check runs. The intent is to validate that admin
holds AppAdmin everywhere, not to exercise the cascade contract — pass
?force=true so we reach the gate we're trying to test.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

crates/picloud/tests/authz.rs

@@ -325,9 +325,11 @@ async fn admin_is_implicit_app_admin_on_every_app(pool: PgPool) {
         .await
         .assert_status_ok();
 
-    // Allowed: delete the default app (AppAdmin).
+    // Allowed: delete the default app (AppAdmin). ?force=true because
+    // the script we created above pushes us past the soft no-cascade
+    // guard — this test is about the capability, not the cascade.
     s.server
-        .delete("/api/v1/admin/apps/default")
+        .delete("/api/v1/admin/apps/default?force=true")
         .add_header("authorization", format!("Bearer {token}"))
         .await
         .assert_status(axum::http::StatusCode::NO_CONTENT);