fix: sweep wave 3 — the execFileSync family gets timeouts (90 sites, 17 files)

The tripwire's regex covered spawnSync/execSync/Bun.spawnSync but not
execFileSync — an entire blocking sync-spawn API family that could
reintroduce the shard-wedge class undetected (ship review army). Same
mechanical recipe as waves 1-2: timeout: 30_000 default, 120_000 for slow
ops, shared wrappers fixed once, string-needle sites skipped with reasons.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

test/resolvers-gbrain-put-rewrite.test.ts

@@ -31,6 +31,7 @@ function listTrackedSkillMd(): string[] {
   const out = execFileSync("git", ["ls-files", "*SKILL.md"], {
     cwd: REPO_ROOT,
     encoding: "utf-8",
+    timeout: 30_000,
   });
   return out.split("\n").filter((line) => line.trim().length > 0);
 }