Add NOPAT to DocumentReference Wiremock stubs

This will allow us to more easily test the behaviour of incumbent
systems E2E.

There are two ways a DocumentReference can be given a NOPAT marking
according to the GP2GP spec, this PR introduces examples for both.

Author: adrianclay

wiremock/stubs/__files/correctPatientStructuredRecordResponseAbsentAttachments.json

@@ -498,7 +498,12 @@
                     "versionId": "8017752596891037527",
                     "profile": [
                         "https://fhir.nhs.uk/STU3/StructureDefinition/CareConnect-GPC-DocumentReference-1"
-                    ]
+                    ],
+                    "security": [{
+                        "system":"http://hl7.org/fhir/v3/ActCode",
+                        "code":"NOPAT",
+                        "display":"no disclosure to patient, family or caregivers without attending provider's authorization"
+                    }]
                 },
                 "identifier": [
                     {
@@ -545,6 +550,18 @@
                         "https://fhir.nhs.uk/STU3/StructureDefinition/CareConnect-GPC-DocumentReference-1"
                     ]
                 },
+                "securityLabel": [
+                    {
+                        "coding": [
+                            {
+                                "system": "http://hl7.org/fhir/v3/ActCode",
+                                "code": "NOPAT",
+                                "display": "no disclosure to patient, family or caregivers without attending provider's authorization"
+                            }
+                        ],
+                        "text": "no disclosure to patient, family or caregivers without attending provider's authorization"
+                    }
+                ],
                 "identifier": [
                     {
                         "system": "https://EMISWeb/A82038",