test(plugin-security): integration tree only — walled-catalog-data-door.test.ts reads the retired objects from S8-T's testkit

main's #22895 landed after S8 was cut and imports the four object files S8
deletes. This adaptation exists on the C3 build-ahead integration tree only;
S8 carries its own resolution when it merges main.

Claude-Session: https://claude.ai/code/session_01287UbjvrigpWwNfGDmdwpS
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/plugins/plugin-security/src/walled-catalog-data-door.test.ts

@@ -29,12 +29,12 @@ import type { PermissionSet } from '@objectstack/spec/security';
 import { SecurityPlugin } from './security-plugin.js';
 import { SysUser, SysMember } from '@objectstack/platform-objects/identity';
 import { SysMetadataActivation } from '@objectstack/platform-objects/system';
-import { SysPosition } from './objects/sys-position.object.js';
+import { SysPosition } from './__tests__/legacy-catalog-objects.testkit.js';
 import { SysUserPosition } from './objects/sys-user-position.object.js';
-import { SysPermissionSet } from './objects/sys-permission-set.object.js';
-import { SysPositionPermissionSet } from './objects/sys-position-permission-set.object.js';
+import { SysPermissionSet } from './__tests__/legacy-catalog-objects.testkit.js';
+import { SysPositionPermissionSet } from './__tests__/legacy-catalog-objects.testkit.js';
 import { SysUserPermissionSet } from './objects/sys-user-permission-set.object.js';
-import { SysCapability } from './objects/sys-capability.object.js';
+import { SysCapability } from './__tests__/legacy-catalog-objects.testkit.js';
 import { WALLED_CATALOG_OBJECT_TYPES } from './walled-catalog-data-door.js';
 
 const ORG = 'org_a';