feat(audit): P1 cross-tenant/RBAC tests, P3 test fixes, P2/P3 frontend fixes

- P1-Tests: 12 test files with new cross-tenant isolation + RBAC tests
- P3-Tests: 8 fixes (duplicate fixtures, sys.path.insert, unused imports, KeyError)
- P3-Frontend: LucideIcons → ICON_MAP (2 files), inline styles → Tailwind (2 files)
- P3-Frontend: DOMPurify for iframe XSS, redundant regex removed, console.log → console.debug
- P2-Frontend: 2 notification API TODOs retained (requires larger refactor)
- conftest.py: create_no_perm_user helper added
- pyproject.toml: pythonpath for scripts/ added
- All checks green: ruff 0, F821 0, tsc 0, app 495 routes, cross-plugin 0

frontend/src/components/contacts/ContactDetail.tsx

@@ -1,4 +1,3 @@
-// TODO: P3-F3 — Replace import * as LucideIcons with explicit icon imports
 import React, { useState, useEffect, useMemo } from 'react';
 import { useTranslation } from 'react-i18next';
 import { Button } from '@/components/ui/Button';
@@ -8,8 +7,16 @@ import { Modal } from '@/components/ui/Modal';
 import { Input } from '@/components/ui/Input';
 import { useToast } from '@/components/ui/Toast';
 
-import { Loader2 } from 'lucide-react';
-import * as LucideIcons from 'lucide-react';
+import { Loader2, FileText, FolderOpen, Mail, Calendar, Link, Tag } from 'lucide-react';
+
+const ICON_MAP: Record<string, React.ComponentType<{ className?: string }>> = {
+  FileText,
+  FolderOpen,
+  Mail,
+  Calendar,
+  Link,
+  Tag,
+};
 import { HistoryViewer } from '@/components/HistoryViewer';
 import { usePluginStore } from '@/store/pluginStore';
 import { useAIUIControlStore } from '@/store/aiUIControlStore';
@@ -154,8 +161,8 @@ function ContactPersonModal({
 }
 
 function getIcon(name: string): React.ReactNode {
-  const Icon = (LucideIcons as any)[name];
-  return Icon ? <Icon className="h-4 w-4" /> : <LucideIcons.FileText className="h-4 w-4" />;
+  const Icon = ICON_MAP[name] ?? FileText;
+  return <Icon className="h-4 w-4" />;
 }
 
 export function ContactDetail({ contact, loading, onEdit, onDeleted, dataTestId = 'contact-detail' }: ContactDetailProps) {