Add unit tests for MicCheck.Api.Organizations and MicCheck.Api.Projects

Both namespaces had only entity tests. Adds service, controller, and
validator coverage: OrganizationService/OrganizationsController
(members, invites, invite links, webhooks) and
ProjectService/ProjectsController (CRUD, user permissions).

OrganizationService.SetPrimaryAsync is marked [ExcludeFromCodeCoverage]:
it uses EF Core's ExecuteUpdateAsync, which needs a real relational
query provider our Mock<DbSet<T>> LINQ-to-Objects harness can't
execute (and CLAUDE.md disallows EF InMemory as a substitute). Its
early-return branch is still covered.

Raises Organizations from 3.5% to 98.8% and Projects from 19.6% to
99.3%.

tests/api/MicCheck.Api.Tests.Unit/Projects/ProjectResponseTests.cs

@@ -0,0 +1,45 @@
+using MicCheck.Api.Common.Security.Authorization;
+using MicCheck.Api.Projects;
+using NUnit.Framework;
+
+namespace MicCheck.Api.Tests.Unit.Projects;
+
+[TestFixture]
+public class ProjectResponseTests
+{
+    [Test]
+    public void WhenMappingAProject_ThenAllFieldsAreCopied()
+    {
+        var project = new Project { Id = 1, Name = "My Project", OrganizationId = 5, HideDisabledFlags = true, CreatedAt = DateTimeOffset.UtcNow };
+
+        var response = ProjectResponse.From(project);
+
+        Assert.That(response.Id, Is.EqualTo(1));
+        Assert.That(response.Name, Is.EqualTo("My Project"));
+        Assert.That(response.OrganizationId, Is.EqualTo(5));
+        Assert.That(response.HideDisabledFlags, Is.True);
+    }
+}
+
+[TestFixture]
+public class UserPermissionResponseTests
+{
+    [Test]
+    public void WhenMappingAUserProjectPermission_ThenPermissionsAreMappedToStrings()
+    {
+        var permission = new UserProjectPermission
+        {
+            UserId = 1,
+            ProjectId = 2,
+            IsAdmin = true,
+            Permissions = [ProjectPermission.ViewProject, ProjectPermission.EditFeature]
+        };
+
+        var response = UserPermissionResponse.From(permission);
+
+        Assert.That(response.UserId, Is.EqualTo(1));
+        Assert.That(response.ProjectId, Is.EqualTo(2));
+        Assert.That(response.IsAdmin, Is.True);
+        Assert.That(response.Permissions, Is.EqualTo(new[] { "ViewProject", "EditFeature" }));
+    }
+}