This commit partially undo the access policy checks for the
GraphQL endpoints, until we find a better story to correlate
the `user_id` we sometimes receive with the info from the
`AuthenticatedUser`.

This commit makes the `GET /api/v1.0/version` test more lax, and less
prone to break on version bumps.

It can be used to "bolt-on" policy checking into Servant API routes.

Tests were written with a very flat module hierarchy which made them
a bit confusing to navigate. This commit moves everything under a common
`Test.*` hierarchy.

This fixes commit 5d5300cd which
automatically changed all 'return' to 'pure' in our code, resulting in
broken SQL etc.

The issue was that when search was performed, the initial table didn't
have an archive ready and so first commit resulted in some errors on
the frontend. This fix performs the commit after flow is finished.