389c10fe92
The GET /portal/conversation/messages endpoint was missing businessId scoping, allowing cross-tenant data access. This adds businessId from businessSettings to the conversation lookup in the messages endpoint, matching the existing GET /portal/conversation protection. Also adds missing lt mock to portal test suite. Co-Authored-By: Paperclip <noreply@paperclip.ing>