Firebase/Firestore security testing covering security rules, Cloud Functions, and client-side trust issues