test(plugin-security): the organization-administrator double refuses WHERE combinators it does not implement

Claude-Session: https://claude.ai/code/session_013WG7E4zFnUTehQ9UXwyQtT
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/plugins/plugin-security/src/delegated-admin-gate.test.ts

@@ -1103,6 +1103,7 @@ function makeOrganizationHarness() {
   };
   const matches = (row: any, where: any): boolean =>
     Object.entries(where ?? {}).every(([k, v]) => {
+      if (k.startsWith('$')) throw new Error(`fake driver: unsupported operator ${k}`);
       if (v && typeof v === 'object' && Array.isArray((v as any).$in)) return (v as any).$in.includes(row[k]);
       return row[k] === v;
     });