Dedicated adversarial coverage for the core security property: no store method can read or mutate another user's profile, workout kinds/paces, or sync state/runs, even when handed that other user's real row id.