WebComment: improve sanity checks

• When reporting, voting, or replying to a comment, or when accessing comment attachments, ensure that the comment belongs to the given record and is not deleted. (For example, this prevents malicious users from attempting to indirectly reach comments in restricted collections by URL mangling.)

• Adds regression tests.