- Add test verifying ContactBindingsSection receives correct capability props - Test userId, emailBindingEnabled, phoneBindingEnabled, refreshSessionUser - Lock regression: prevent future removal of prop-passing while keeping render Refs: review-fix-closure-2026-05-28 ProfileSecurityPage component contract