chore: clear dead test and allowlist leftovers of dropped runtimes

tests/cursor-subagent-isolation.test.cjs

@@ -107,7 +107,7 @@ describe('msd-cursor-subagent-start.js: isolation guard applicability (#3045)',
   let linkedWorktree; // real `git worktree add` of harnessProject, NOT under Cursor's managed
                        // worktree root — a hand-made worktree the user opened themselves.
                        // #3045 finding 3: this is no longer treated as isolation proof.
-  let noneProject; // config.json { runtime: 'windsurf' } -> resolves to 'none'
+  let noneProject; // config.json { runtime: 'zcode' } -> resolves to 'none'
   let orchestratorEnvProject; // exercised via MSD_RUNTIME=codex -> 'orchestrator-worktree'
   let noMsdDir; // no .planning at all
   let unreadableConfigProject; // config.json is a directory (EISDIR)
@@ -126,7 +126,7 @@ describe('msd-cursor-subagent-start.js: isolation guard applicability (#3045)',
     git(['worktree', 'add', linkedPath, '-b', 'agent-msd-cs-iso-test'], harnessProject);
     linkedWorktree = linkedPath;
 
-    noneProject = makeGitProject('msd-cs-none-', JSON.stringify({ runtime: 'windsurf' }));
+    noneProject = makeGitProject('msd-cs-none-', JSON.stringify({ runtime: 'zcode' }));
     orchestratorEnvProject = makeGitProject('msd-cs-orch-', JSON.stringify({}));
 
     noMsdDir = createTempDir('msd-cs-nomsd-');
@@ -184,7 +184,7 @@ describe('msd-cursor-subagent-start.js: isolation guard applicability (#3045)',
     assert.equal(out.permission, undefined);
   });
 
-  test('resolved mode none (config.json runtime=windsurf) -> allow', () => {
+  test('resolved mode none (config.json runtime=zcode) -> allow', () => {
     const r = runHook(subagentPayload([noneProject]));
     assert.equal(r.status, 0, `stdout: ${r.stdout}`);
     const out = JSON.parse(r.stdout);