PUT /api/admin/calendars/:id/shared cleared the current shared calendar then set the target in two non-transactional UPDATEs without checking the target exists — a bad/stale id wiped the family shared lane and still returned ok. Verify the target inside a transaction; return 404 when absent. Adds a regression test (RED→GREEN).