test: harden verification fixtures and runtime coverage

Use exact discovered test identities, production MCP sessions and byte-exact setup backups. Add CLI signal cleanup coverage and independent Ghidra, Go and firmware verification assertions; prune redundant test configuration and preserve platform limits.

scripts/verify-opencode-client.mjs

@@ -2,7 +2,7 @@ import assert from "node:assert/strict";
 import { createHash } from "node:crypto";
 import { mkdir, mkdtemp, readFile, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join } from "node:path";
+import { isAbsolute, join, relative, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import Ajv2020 from "ajv/dist/2020.js";
 import {
@@ -42,6 +42,21 @@ const skillDirectory = join(
   "skills",
   "reverse-engineer-anything",
 );
+const isManagedSkillTarget = (target) => {
+  const value = relative(skillDirectory, target);
+  return (
+    value === "" ||
+    (value !== ".." && !value.startsWith(`..${sep}`) && !isAbsolute(value))
+  );
+};
+assert.equal(
+  isManagedSkillTarget(`${skillDirectory}-sibling/AGENTS.md`),
+  false,
+);
+assert.equal(
+  isManagedSkillTarget(join(skillDirectory, "..", "outside", "AGENTS.md")),
+  false,
+);
 await Promise.all([mkdir(account), mkdir(profile), mkdir(workspace)]);
 await exec("git", ["init", "--quiet", workspace], { timeout: 30_000 });
 const environment = {
@@ -264,8 +279,7 @@ try {
         assert(parsed.plannedActions.some((a) => a.target === skillDirectory));
         assert(
           parsed.plannedActions.every(
-            (a) =>
-              a.target === configPath || a.target.startsWith(skillDirectory),
+            (a) => a.target === configPath || isManagedSkillTarget(a.target),
           ),
         );
       }