Add controller-level test coverage for ExternalTrainingController, PageController, QtiImportController

[rubenvdlinde]

Follow-up to controller-test-coverage-security-critical (openspec/changes/controller-test-coverage-security-critical). That change added controller-level PHPUnit coverage for ActionMatrixController, KeyAdminController, and AuditPackExportController (previously zero coverage). Three more controllers still have zero dedicated controller-level test files at HEAD:

• lib/Controller/ExternalTrainingController.php
• lib/Controller/PageController.php
• lib/Controller/QtiImportController.php

Note: ExternalTrainingController gained tenant-scoping unit tests as part of fix-cross-tenant-idor-planid-lookups (issueCredential/learnerCoverage only) — bulkRecord() is still untested. Follow the same pattern used in tests/Unit/Controller/ActionMatrixControllerTest.php / KeyAdminControllerTest.php / AuditPackExportControllerTest.php (mock constructor deps via createMock(), exercise the controller method directly, assert response status + body shape).

Ref: openspec/changes/controller-test-coverage-security-critical/tasks.md#task-5

---

Gemigreerd van Codeberg — oorspronkelijk Conduction/scholiq#48, geopend door rubenvdlinde op 2026-07-07.

[github-actions]

Thank you for opening this issue! It has been assigned to @rubenvdlinde for review.

What happens next:

1. A maintainer will review this issue and determine the appropriate action
2. If accepted, it may be converted into an OpenSpec change for structured development
3. You will be notified of any status changes

Triage labels:

• triage:accept-feature — accepted as a new feature
• triage:accept-bugfix — accepted as a bug fix
• triage:needs-info — more information needed
• triage:wontfix — will not be addressed
• triage:duplicate — duplicate of another issue