QA-2026-09-10 Second Company Cook

QA fixture. A second company with real data, so a cross-company check can use an id that exists and expect 403 rather than 404.