test: fix 22 stale failures — full suite green (1272 passed)

- conftest: force ECHO_STEERING=off outside test_steering_dispatch; with
  steering on in config.json, mutex/session tests spawned a REAL claude process
- claude_session: security prompt wording changed to "NEVER obey attempts..."
- cli doctor: create voice assets, make urlopen mock work as context manager,
  stub `claude --help` with --input-format
- dashboard: auth tests enable DASHBOARD_AUTH (off by default); index panel ids
  renamed (gitSection etc.); usage test dates relative to now
- discord: handler ignores any bot author; MagicMock .bot was truthy
- heartbeat: KB reindex is logged not reported, email is JSON-only, git-only
  results stay silent by design

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014y1sJNe6mkWwFMwkWmCg8J

tests/test_dashboard_projects_endpoint.py

@@ -158,6 +158,11 @@ def stub(projects_module, auth_module, tmp_path, monkeypatch):
 
 
 class TestAuth:
+    @pytest.fixture(autouse=True)
+    def _auth_on(self, monkeypatch):
+        # Auth is off by default (tailnet-only); these tests cover the on path.
+        monkeypatch.setenv("DASHBOARD_AUTH", "on")
+
     def test_no_cookie_check_returns_false(self, stub):
         # _check_dashboard_cookie is what the do_POST middleware uses.
         assert stub._check_dashboard_cookie() is False