[AZ-563] Decompose blackbox tests into AZ-564..574 task specs

Step 5 of autodev existing-code flow. Epic AZ-563 plus 11 atomic
tasks covering all 67 test scenarios from
_docs/02_document/tests/* exactly once:

- AZ-564 test infrastructure (xUnit + Docker + mock JWKS + dataseed)
- AZ-565..568 functional positive (FT-P-01..22)
- AZ-569..570 functional negative (FT-N-01..16)
- AZ-571 security (NFT-SEC-01..10)
- AZ-572 resilience (NFT-RES-01..06)
- AZ-573 resource limits (NFT-RES-LIM-01..06)
- AZ-574 performance (NFT-PERF-*)

_dependencies_table.md records the cross-check vs traceability
matrix (22 + 16 + 29 = 67 scenarios, no overlaps, no gaps; deferred
items remain deferred per matrix). All task headers carry their
Jira IDs (tracker: jira). Autodev state advanced to Step 6
(Implement Tests).

Co-authored-by: Cursor <cursoragent@cursor.com>

_docs/_autodev_state.md

@@ -2,8 +2,8 @@
 
 ## Current Step
 flow: existing-code
-step: 5
-name: Decompose Tests
+step: 6
+name: Implement Tests
 status: not_started
 sub_step:
   phase: 0
@@ -29,6 +29,10 @@ tracker: jira
   name: Code Testability Revision
   status: completed
   outcome: "2 surgical fixes (C01 JWKS HTTPS env gate, C02 RabbitMQ host DNS resolution); commits 90d48cf + Phase 7 docs; smoke PASS (IDX20108=0, IPAddress.Parse FormatException=0); architecture.md Open Risks §6 retired"
+- step: 5
+  name: Decompose Tests
+  status: completed
+  outcome: "Epic AZ-563 + 11 tasks AZ-564..574; 67 scenarios covered exactly once (cross-checked vs traceability matrix); _dependencies_table.md updated"
 
 ## Mid-step adjustments
 - 2026-05-14: targeted auth + CORS re-sync triggered by codebase drift discovered at Step 4 entry.