test(#3336): fold the installer & runtime surface issue-* cluster — Wave 4 (#3376)

* test(#3336): fold the installer & runtime surface issue-* cluster — Wave 4

Folds 10 legacy issue-*.test.cjs regression files (79 test() blocks) into
their module's main suite, per H3 (#3315) of the test-hygiene epic (#3053).
First of 4 issue-* waves (following the 3 fix-* waves, all merged).

- 1 file with no prior target coverage: renamed (git mv) into
  legacy-cleanup.test.cjs (sole comprehensive suite for that module).
- 9 files merged into 6 pre-existing suites: golden-parity-single-source,
  runtime-artifact-layout-surface, codex-config (4 sources merged jointly
  in one pass per the issue's own instruction, to catch overlap between the
  4 sources themselves, not just against the pre-existing target — zero
  overlap found, all 20 blocks additive), runtime-config-adapter-registry
  (1 of 10 source blocks dropped as a proven subset of existing coverage),
  cline-install, install.test.cjs.

Incidental fixes required to keep this wave's own ratchets green:
- Fixed a stale ADR doc reference (docs/adr/1235) to a folded-away filename.
- scripts/lint-allow-test-rule-refs: pruned 4 stale allowlist entries for
  renamed/merged-away files, cited 2 previously-uncited allow-test-rule
  comments that surfaced as "new" only because their file path changed,
  added 1 fresh allowlist entry for a pre-existing uncited comment that
  predates this PR, and tightened the exemption-file ceiling 309 -> 305
  to match the real post-fold high-water mark.

Zero net test-coverage loss. No production code changed.

* test(#3336): fix orthogonal-review findings — Wave 4 fold

Standards-axis review + Memtrace graph pass found real issues in the
just-folded suites, all fixed here:

- Standardized the fold-wrapper convention (block-scoped __foldDescribe)
  across golden-parity-single-source.test.cjs, runtime-artifact-layout-
  surface.test.cjs, runtime-config-adapter-registry.test.cjs, and
  cline-install.test.cjs to match the pattern already used by
  codex-config.test.cjs and install.test.cjs in this same wave (and by
  earlier folds elsewhere in the epic) — repeats the exact inconsistency
  Wave 3 (#3335) already fixed once in this epic.
- Fixed a stale allowlist entry's alphabetical position (cosmetic, not
  tool-gated, caught by review anyway).
- Fixed two stale test-filename references in PRODUCTION code comments
  (src/capability-writer.cts, src/runtime-config-adapter-registry.cts)
  caught by lint-removed-but-needed — a class of stale reference this
  wave's fold agents didn't check for, since they were scoped to docs/
  and gsd-core/references/ only, not src/. First fix attempt wrongly
  edited the gitignored gsd-core/bin/lib/*.cjs BUILD OUTPUT instead of
  the tracked .cts source; caught and corrected before commit.
- Fixed one remaining stale doc reference in docs/adr/1235 (a prior
  partial fix in this same wave missed it).

No test() count changed in any file. No production code BEHAVIOR
changed — comment-only fixes in src/.

---------

Co-authored-by: sim <sim@local>

src/capability-writer.cts

@@ -372,8 +372,9 @@ function setCapabilityState(
       // access to getCommitAttribution (which lives in bin/install.js). Until that
       // is refactored into a shared module, surface-path agents for descriptor-
       // driven runtimes will lack the Co-Authored-By trailer that install adds.
-      // Parity is proven when resolveAttribution IS provided (see
-      // tests/issue-1575-agent-descriptor-parity.test.cjs).
+      // Parity is proven when resolveAttribution IS provided (see the
+      // folded:issue-1575-agent-descriptor-parity describe block in
+      // tests/golden-parity-single-source.test.cjs).
       // eslint-disable-next-line @typescript-eslint/no-unsafe-argument
       applySurface(resolvedConfigDir, layout, manifest, undefined, registry, opts?.materialize?.resolveAttribution
         ? { resolveAttribution: opts.materialize.resolveAttribution }

src/runtime-config-adapter-registry.cts

@@ -101,8 +101,9 @@ type RuntimeDescriptorMap = Record<string, { runtime: Record<string, unknown> |
  * (Marketplace/VSIX-distributed, never dispatched through
  * install()/finishInstall()), so it is not a "config-adapter runtime" by
  * definition. This keeps this set in lockstep with bin/install.js's
- * `allRuntimes` (see tests/issue-57-runtime-install-no-drift.test.cjs) without
- * needing a separate hand-kept exclusion list.
+ * `allRuntimes` (see the folded:issue-57-runtime-install-no-drift describe
+ * block in tests/runtime-config-adapter-registry.test.cjs) without needing a
+ * separate hand-kept exclusion list.
  */
 const ALLOWED_CONFIG_RUNTIMES: ReadonlySet<string> = new Set(
   Object.entries(runtimes)