refactor(test): build LDAP fixtures via ldap.NewObject instead of unsafe

[CybotTM]

simple-ldap-go v1.14.0 adds func NewObject(cn, dn string) Object (netresearch/simple-ldap-go#191). Until then Object.cn/Object.dn were written only by the package-internal objectFromEntry, so a consumer could not construct a fixture with a DN through the public API — the test helper reached for reflect plus unsafe.Pointer(dnField.UnsafeAddr()), which gosec reports as G103.

Removed: setObjectDN() and the reflect/unsafe imports in internal/server/test_helpers_test.go. The three mock users (admin, user1, user2) now get their Object from ldap.NewObject(cn, dn) in the struct literal.

setObjectDN only wrote dn and left cn empty; NewObject takes both. Each fixture uses the leading RDN of its own DN as the cn — CN=admin,OU=Users,DC=example,DC=com gives "admin" — which is what the directory would return for these entries. Nothing in raybeam reads CN() today, so this only makes the fixtures less lopsided.

go mod tidy also dropped stale duplicate entries in go.sum (older go-ldap, gofiber, asn1-ber versions that no longer resolve).

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
gomod/github.com/netresearch/simple-ldap-go	1.14.0	🟢 7.5	Details Check Score Reason Packaging ⚠️ -1 packaging workflow not detected Dependency-Update-Tool 🟢 10 update tool detected Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 4 security policy file detected Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Maintained 🟢 10 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Vulnerabilities 🟢 7 3 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits Signed-Releases ⚠️ 0 Project has not signed or included provenance with any releases. License 🟢 10 license file detected Fuzzing 🟢 10 project is fuzzed Branch-Protection 🟢 3 branch protection is not maximal on development and all release branches Contributors 🟢 10 project has 9 contributing companies or organizations CI-Tests 🟢 10 14 out of 14 merged PRs checked by a CI test -- score normalized to 10

Scanned Files

• go.mod

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Automated approval for maintainer PR

All automated quality gates passed. See SECURITY_CONTROLS.md for compensating controls.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 74.70%. Comparing base (f963d3c) to head (44d5307).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #255   +/-   ##
=======================================
  Coverage   74.70%   74.70%           
=======================================
  Files          10       10           
  Lines         427      427           
=======================================
  Hits          319      319           
  Misses         88       88           
  Partials       20       20           

Flag	Coverage Δ
e2e	74.70% <ø> (ø)
integration	74.70% <ø> (ø)
unittests	74.70% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.