Test deferred database invariants through COMMIT under the real restricted role
Observed 2026-09-04 in an isolated synthetic PostgreSQL 16 experiment: a restricted role can successfully return from a SECURITY DEFINER mutation yet fail at COMMIT when a deferred SECURITY INVOKER constraint trigger reads tables the caller cannot access. Testing only the functio…