test(plugin-auth): the tenant SMS template row is read in the resolved organization

The AuthManager test that pins "a tenant row overrides the built-in text"
now composes a tenancy service answering the Default Organization and
serves the row only to a read keyed by that organization, the way the
phone SMS resolver reads since the template row is organization-scoped.

Claude-Session: https://claude.ai/code/session_01UmqzD97e14iws6hmVhgZ5y
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/plugins/plugin-auth/src/auth-manager.test.ts

@@ -2688,11 +2688,16 @@ describe('AuthManager', () => {
     });
 
     it('a tenant sys_notification_template row overrides the built-in text', async () => {
+      // The row is read in the organization the send resolves to,
+      // `tenancy.defaultOrgId()` — the Default Organization under `single`
+      // (phone-sms-texts.ts, "Which organization's row").
       const { manager, opts } = await bootOtp({
+        getTenancy: () => ({ defaultOrgId: async () => 'org_default' }),
         dataEngine: {
           async find(object: string, q: any) {
             if (
               object === 'sys_notification_template' &&
+              q?.where?.organization_id === 'org_default' &&
               q?.where?.topic === 'auth.phone_otp' &&
               q?.where?.channel === 'sms' &&
               q?.where?.locale === 'zh-CN'