test: derive paid touchfiles from each eval's static closure (E)

touchfiles.test.ts now checks, per key, that the paid file's static
test/helpers and test/fixtures closure (plus fixture paths it names in string
literals) is covered, and names the file, path, chain and key to fix when it is
not. Free *.test.ts files are no longer touchfiles, so editing a free replay
test stops selecting paid evals: 950 entries removed, 653 real closure paths
added. The hand-copied inventories go: periodic-fixture-selection,
fake-impeccable-touchfiles and 45 per-file selection examples. Selection for
the sample edits (plan-eng-review template, claude-pty-runner,
plan-count-fixture, gstack-config) loses no case under either profile.
CONTRIBUTING documents the rule and its lower bound.

test/hermetic-skill-runtime.test.ts

@@ -8,17 +8,10 @@ import { getHermeticDirs, hermeticSkillsConfigDir } from './helpers/hermetic-env
 import { refreshHermeticSkillRuntime, questionCompanionReadSettings, hermeticSkillRuntime } from './helpers/hermetic-skill-runtime';
 import { pathToFileURL } from 'node:url';
 import { createHash } from 'node:crypto';
-import { E2E_TOUCHFILES, selectTests } from './helpers/touchfiles';
 const ROOT = path.resolve(import.meta.dir, '..');
 const digest = (file: string) => createHash('sha256').update(fs.readFileSync(file)).digest('hex');
 
 describe('hermetic seeded PTY runtime', () => {
-  test('runtime helper and regression select every PTY consumer', () => {
-    const consumers = Object.entries(E2E_TOUCHFILES).filter(([, files]) => files.includes('test/helpers/claude-pty-runner.ts')).map(([name]) => name).sort();
-    expect(consumers.length).toBeGreaterThanOrEqual(15);
-    for (const file of ['test/helpers/hermetic-skill-runtime.ts', 'test/hermetic-skill-runtime.test.ts'])
-      expect(selectTests([file], E2E_TOUCHFILES).selected.sort()).toEqual(consumers);
-  });
   test.skipIf(process.platform === 'win32')('uses current lazy files and tools with scoped access, preserving auth, caches, and explicit overrides', async () => {
     const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-runtime-probe-'));
     const operatorHome = path.join(dir, 'operator-home');