Add end-to-end tests for TLS RPT report ingestion and WebSocket event handling

- Implemented tests for ingesting TLS RPT reports from emails and ensuring they are stored correctly in the database.
- Added tests to verify that the same report can be ingested multiple times without duplication.
- Created tests for backfilling reports that were previously delivered to the inbox.
- Developed WebSocket event handling tests to ensure events are correctly routed to subscribers based on mailbox ownership.
- Included tests for the mail API to validate session handling, mailbox isolation, and error mapping.
- Ensured that the API rejects unauthorized requests and handles malformed JSON gracefully.

services/webmail/src/app/(user)/user/layout.tsx

@@ -43,6 +43,9 @@ export default function UserWebmailLayout({ children }: { children: React.ReactN
     { href: "/user/mail/archive", label: t("mail.archive"), icon: Archive, role: "archive" },
     { href: "/user/mail/junk", label: t("mail.junk"), icon: AlertTriangle, role: "junk" },
     { href: "/user/mail/trash", label: t("mail.trash"), icon: Trash2, role: "trash" },
+    // Where delivered DMARC and TLS-RPT reports are filed. Matched by name
+    // rather than a special-use role, because IMAP defines none for reports.
+    { href: "/user/mail/reports", label: t("mail.reports"), icon: ShieldCheck, role: "reports" },
   ];
 
   const handleLogout = () => {