Added capability contract tests for the five untested AI preview/parse routes — vendor-scoping, injection-defense prelude, and no-write guards across email-draft, email-preview, letter-preview, reminder-preview, parse-customers. #donequote