DEV: Improve tests coverage when listing private messages. (PR #14385)

This is in response to the security incident published in https://github.com/discourse/discourse/security/advisories/GHSA-vm3x-w6jm-j9vv.

The security incident highlighted a gap in our test suite so we’re adding more test cases to ensure that personal and group messages do not leak between users in the future.

GitHub