Creates a throwaway dynsec client+role scoped to a private topic,
publishes/subscribes to confirm round-trip delivery, checks a bogus
login is rejected, then cleans up. Syntax verified against a real
eclipse-mosquitto:2 + dynamic-security broker locally before writing.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
