#1260 Retire the dead lint deferrals and clear run-core and foreman

[williamthorsen]

What

Fixes deferred lint violations in the lifecycle, run-core, and foreman packages and removes the cap on the severity of associated rules when a strict-lint check is run.

Why

A deferred rule sits at warn, and the lint check runs with no --max-warnings, so it gates nothing: fresh violations accumulate unnoticed and the list stops meaning anything. Fourteen entries across the per-package lists had stopped naming a violation at all, and one of them was reviving a rule the shared config had already turned off, manufacturing seven warnings out of nothing.

Details

♻️ Refactoring

• The eleven .catch() rejection captures in run-core's run-data-parser.unit.test.ts route through a file-local captureRejection helper. error stays unknown, so every downstream instanceof narrowing and property assertion is untouched; the helper's trailing throw names an unexpected resolution that previously surfaced as a confusing toBeInstanceOf mismatch.
• run-directory-scanner's two discovery branches collapse to a ternary with a single
  entries.push tail, and ticketsDir becomes hasTicketsDir — it held a boolean but read as a path.
• foreman's vitest.setup.ts installs its matchMedia and ResizeObserver stubs through
  Object.defineProperties, each from a typeof globalThis.x-annotated const that preserves the type checking the bare assignment had. vi.stubGlobal, the obvious substitute, would have been stripped by the vi.unstubAllGlobals() that two foreman suites run in afterEach, leaving Mantine to render without matchMedia.
• FakeEventSource.dispatch binds its listener list above the loop, and the manual resolver extraction in useFleetSnapshot.unit.test.ts becomes Promise.withResolvers.

⚙️ Tooling

• lifecycle, run-core, and foreman lose all three deferral touchpoints: .config/eslint/deferred-lint-rules.ts, the { files, rules } block in eslint.config.ts, and .config/strict-lint.config.ts. The repo root's advisoryRuleSeverities ceiling governs them by cascade, which strict-lint --debug confirms for every directory in each package.
• agents drops five entries and kb one, leaving each list at exactly the rules its package still violates: eleven for agents, nine for kb.
• unicorn/prefer-simple-condition-first leaves every list. It is off in eslint-config-typescript 8.7.0, so an entry holding it at warn was re-enabling it.
• The commented-out *malformed* fixture-ignore patterns leave lifecycle's and run-core's globalIgnores; neither package holds such a fixture.

Closes #1260

[github-actions]

Dependency audit

Production dependency audit passed.