Developer manual: testing.rst is outdated and doesn't cover app tests

[miaulalala]

basics/testing.rst is outdated (Karma, @expectedException, old container syntax, a mock that doesn't match the code), and it doesn't explain how to set up PHPUnit for an app or how to test permission checks (user B can't access user A's data).