Document the testing strategy

[Glittersup]

Problem. CONTRIBUTING.md says the contract requires "the strongest tests" without defining what that means. With backend and frontend currently at zero tests, a stated expectation per repo would give those issues a target.

Acceptance criteria

• Expected coverage is stated per repository.
• Parity between the three vesting implementations is called out as required.