test: stabilize pre-deployment gates

Remove the redundant timing-dependent native Argon2 concurrency test while retaining native vector coverage and deterministic limiter coverage. Refresh stale deployment and browser contracts, make release scripts portable across Bash/macOS, and update production dependency locks for resolved security advisories.
2026-09-04 16:15:35 +02:00
parent 7b1d69a65b
commit eba6148511
11 changed files with 204 additions and 124 deletions
@@ -153,7 +153,7 @@ test("real schema-v4 registry revision loads through ThtRunner and the harness c
    f.dataRoot, "sessions", "psd-clinical", "sessions", created.id, "session_manifest.yaml",
  ))).toBe(true);
  expect(readdirSync(join(f.registryConfig.root, "snapshots", "runtime"))).toEqual([]);
-});
+}, 15_000);

 test("ThtRunner uses a vault secret only for the lifetime of its runtime lease", async () => {
  const f = await fixture();