docs: 📜 update error message for forbidden includes to clarify not found status

Author: erlendellefsen

docs/docs/security.md

@@ -54,7 +54,7 @@ When forbidden includes are requested, a 403 Forbidden response is returned:
   "errors": [{
     "status": "403",
     "title": "Forbidden Include",
-    "detail": "The requested include 'sensitive' is not allowed for this endpoint",
+    "detail": "The requested include 'sensitive' was not found",
     "meta": {
       "requestedIncludes": ["profile", "sensitive"],
       "forbiddenIncludes": ["sensitive"],
@@ -77,4 +77,4 @@ Invalid patterns are logged as warnings during application startup:
 ```
 AllowedIncludesAttribute validation warnings for UsersController.GetUsers: 
 Pattern 'user.**' contains '**' which is not supported. Use single '*' for wildcards.
-```
+```