fix(scripts): pass MCP callTool timeouts as request options (#2387)

@modelcontextprotocol/client 2.3.1 declares callTool(params, options).
Three verifiers still used the v1 shape callTool(params, undefined,
{ timeout }), so the third argument was dropped and those calls ran
under the SDK's 60 s default instead of the 150-180 s they request.
Pass the options second.

scripts/verify/javascript/recovery.mjs

@@ -41,9 +41,10 @@ const cli = async (...args) => {
   return parseEvidence(JSON.parse(stdout));
 };
 const call = async (name, args) => {
-  const result = await client.callTool({ name, arguments: args }, undefined, {
-    timeout: 150000,
-  });
+  const result = await client.callTool(
+    { name, arguments: args },
+    { timeout: 150000 },
+  );
   assert.notEqual(result.isError, true, mcpTextValue(result));
   return parseEvidence(JSON.parse(mcpTextValue(result)));
 };