Add free tests for remaining code-review debt: runtimeRoot vs setup parity,
generateSpecSpawn fail-closed allowlist, GrokAdapter auth/HOME/prompt-file,
compat-audit fixture exit codes, and preflight-no-wipe setup smoke. Prefer
HOME for auth discovery so hermetic tests work under Bun; pipe stderr so
token-shaped CLI errors never inherit onto the parent console.
Nehr