test: sync-spawn timeout tripwire — the wedge class stays extinct

Free scanner over all test trees (test/, browse/test/, design/test/,
make-pdf/test/, ios-qa, browser-skills): every spawnSync/execSync/
Bun.spawnSync call site must carry a timeout within a 30-line options
window, or an explicit '// tripwire-exempt: <reason>' marker. Comment
lines are skipped; exemptions are counted and ratcheted shrink-only
(ceiling 6 = the 6 string-fixture/grep-needle sites where the pattern is
CONTENT, not a call — marked in this commit). A scan-sanity test pins that
the scanner still sees >100 real call sites so it can never rot to a
vacuous green. Companion to the 436-site sweep in the previous commit.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

browse/test/windows-spawn-hide.test.ts

@@ -70,6 +70,7 @@ describe('windowsHide on Windows-reachable spawns (#1835)', () => {
     const EXEMPT: Array<{ file: string; needle: string; reason: string }> = [
       {
         file: 'domain-skill-commands.ts',
+        // tripwire-exempt: grep NEEDLE string for this census, not a call
         needle: 'spawnSync(editor',
         reason: "interactive $EDITOR with stdio:'inherit' — windowsHide would detach a console editor into an invisible console",
       },