BFLA testing for action-level authorization failures across endpoints, admin functions, and API operations
