FakeI1Guard class final

The I1 guard of the fake's rights changes (10 5.4, 11; BR-01, BR-07, BR-08).

run applies a change, checks I1 for every active personal agent of the world afterwards and restores everything on a violation; the request's resolve_i1 switches the listed agents to organization first. dryRun does the same for a preview and always restores.

Example:

final guard = FakeI1Guard(world, audit);
return guard.run(r, action: 'owner.add', resourceKind: 'user', apply: () {
  person.isOwner = true;
  return (response: FakeResponse(201, owner), resourceId: person.id, details: {});
});