harden approval-rules test stub against exhausted pages

[m4ttheweric]

follow-up from PR #1 review: the stubRunQuery helper replays the last page once supplied responses run out, which can hide extra requests or loop a regressed cursor guard. throw when the call index passes pages.length so unexpected requests fail deterministically.

🤖 Generated with Claude Code