Merge branch 'codex/work-folders-runtime-hardening-refresh' into codex/work-folders-staging-hardening-refresh

* codex/work-folders-runtime-hardening-refresh:
  test(runner): bound real Claude snapshot verification separately

packages/paperclip-runner/src/drivers/acpx/installation-integrity.test.ts

@@ -594,6 +594,9 @@ describe("ACPX installation integrity", () => {
       );
       await (await installation.openCommand()).close();
     },
+    // The real macOS snapshot copies the installed SDK tree; this is an
+    // integrity check, not a five-second startup performance benchmark.
+    60_000,
   );
 
   it.runIf(process.platform === "linux" && process.arch === "x64")(