feat: access tab with allowed roles and connection revocation

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01At3V6SjwbMe6eMzVGW3Hs7

tests/Stubs/WpApplicationPasswords.php

@@ -0,0 +1,34 @@
+<?php
+
+declare(strict_types=1);
+
+if (! class_exists('WP_Application_Passwords')) {
+    /**
+     * In-memory stand-in for WordPress' application password store.
+     */
+    class WP_Application_Passwords
+    {
+        /** @var array<int, array<string, array<string, mixed>>> user ID => uuid => item */
+        public static array $items = [];
+
+        public static function get_user_application_password($user_id, $uuid)
+        {
+            return self::$items[(int) $user_id][(string) $uuid] ?? null;
+        }
+
+        public static function get_user_application_passwords($user_id)
+        {
+            return array_values(self::$items[(int) $user_id] ?? []);
+        }
+
+        public static function delete_application_password($user_id, $uuid)
+        {
+            if (! isset(self::$items[(int) $user_id][(string) $uuid])) {
+                return new WP_Error('application_password_not_found', 'Not found.');
+            }
+            unset(self::$items[(int) $user_id][(string) $uuid]);
+
+            return true;
+        }
+    }
+}