fix: sweep wave 3 — the execFileSync family gets timeouts (90 sites, 17 files)

The tripwire's regex covered spawnSync/execSync/Bun.spawnSync but not
execFileSync — an entire blocking sync-spawn API family that could
reintroduce the shard-wedge class undetected (ship review army). Same
mechanical recipe as waves 1-2: timeout: 30_000 default, 120_000 for slow
ops, shared wrappers fixed once, string-needle sites skipped with reasons.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

test/timeline.test.ts

@@ -50,7 +50,7 @@ function runReadArgs(args: string[] = []): string {
     timeout: 15000,
   };
   try {
-    return execFileSync(path.join(BIN, 'gstack-timeline-read'), args, execOpts).trim();
+    return execFileSync(path.join(BIN, 'gstack-timeline-read'), args, execOpts).trim(); // timeout via execOpts
   } catch {
     return '';
   }