fix(frontend): complete audit remediation

src/entities/brokerage-event/api/useBrokerageEvents.test.tsx

@@ -7,6 +7,22 @@ import { server } from "@/test/server";
 import { useBrokerageEvents } from "./useBrokerageEvents";
 
 describe("useBrokerageEvents", () => {
+	it("does not fetch events without an account ID", async () => {
+		configureAuthClient({
+			accessToken: () => "token",
+			refresh: async () => true,
+			clear: vi.fn(),
+		});
+		const requested = vi.fn(() => HttpResponse.json({ events: [] }));
+		server.use(
+			http.get("*/api/v1/brokerage-accounts/:accountId/events", requested),
+		);
+		const { result } = renderHook(() => useBrokerageEvents(undefined), {
+			wrapper: createQueryWrapper().wrapper,
+		});
+		await waitFor(() => expect(result.current.fetchStatus).toBe("idle"));
+		expect(requested).not.toHaveBeenCalled();
+	});
 	it("loads future cash events through the authenticated query seam", async () => {
 		configureAuthClient({
 			accessToken: () => "token",