chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)

* chore(types): add declaration files for scripts/lib and scripts/e2e modules

* chore(types): add declaration files for top-level script modules (a-m)

* chore(types): add declaration files for top-level script modules (n-z)

* test: use a non-secret-shaped gateway token fixture

* test: type ci workflow guard helpers for the root test lane

* chore(tooling): typecheck root test/** with a dedicated tsgo lane

- test/tsconfig/tsconfig.test.root.json: root-test program (strict unused checks,
  fixtures excluded; two Docker E2E clients that import built dist/** stay out,
  same rationale as the scripts/e2e exclusion in tsconfig.scripts.json)
- tsgo:test:root wired into tsgo:test, check:test-types, scripts/check.mjs, and
  the ci.yml test-types shard, mirroring the tsgo:scripts lane (#104348)
- changed-lane routing: test/**/*.ts (excluding fixtures) and the lane tsconfig
  now trigger 'typecheck test root' in check:changed; previously test/ paths ran
  lint only, so harness type errors surfaced first in CI (#104287 envDir case)
- burn down all 1071 latent type errors in the program: precise param/local
  types across test/scripts, test/vitest, test/e2e, and transitive scripts/e2e
  program members; 205 sibling .d.mts declaration files for imported .mjs
  modules (committed separately); zero any, zero ts-expect-error
- resolve the pre-existing testing star-export ambiguity in
  scripts/e2e/parallels/common.ts with an explicit re-export

Closes #104388

* chore(types): correct declaration fidelity per structured review

- re-derive 51 .d.mts files from implementation data flow instead of
  initializers: fix a wrong never return (runTestProjectsDelegation returns
  the child), add encoding-sensitive exec/spawn overloads (plain-gh), restore
  the full release profile union, make parsed paths string | null, add missing
  parseArgs fields via help/non-help unions, add a missing sibling declaration
  (budget-number-args), drop 15 unused lint directives
- precise install-record/tuple typing removes the type-aware oxlint
  regressions the first declarations caused in scripts/e2e implementations
- route .mts declaration edits under test/ to the testRoot lane and reference
  the test-root project from tsconfig.projects.json so tsgo:all covers it
  (closes both review findings against the lane wiring)

* chore(scripts): keep telegram runner dist typing structural for the boundary guard

* chore(types): declare runtime pack and gateway readiness exports added on main

* test: pin the importTargetPlan form of the plugin-contract plan import

The guard expectation still referenced the raw await import( form that
7ae5996bb3 (#103975) replaced with the importTargetPlan fallback helper;
the assertion fails on current main.

scripts/render-github-release-notes.d.mts

@@ -0,0 +1,77 @@
+#!/usr/bin/env node
+export function githubReleaseBodySize(body: unknown): {
+  characters: number;
+  bytes: number;
+};
+export function fitsGithubReleaseBody(body: unknown): boolean;
+export function extractChangelogReleaseSections(changelog: string): {
+  version: string;
+  source: string;
+}[];
+export function extractChangelogSection(changelog: unknown, version: unknown): unknown;
+export function releaseNotesVersionForTag(tag: unknown): unknown;
+export function formatShippedBaselineExclusions(baselines: ShippedBaselineExclusion[]): string;
+export function parseShippedBaselineExclusions(section: string): ShippedBaselineExclusion[];
+export function tagPinnedContributionRecordUrl(repository: unknown, tag: unknown): string;
+export function dedicatedSectionVersionForTag(tag: unknown): unknown;
+export function releaseNotesSectionForTag(
+  changelog: unknown,
+  version: unknown,
+  tag: unknown,
+): unknown;
+export function renderGithubReleaseNotes({
+  changelog,
+  version,
+  tag,
+  repository,
+  verification,
+}: {
+  changelog: unknown;
+  version: unknown;
+  tag: unknown;
+  repository: unknown;
+  verification?: string | undefined;
+}): {
+  body: string;
+  mode: string;
+  size: {
+    characters: number;
+    bytes: number;
+  };
+  verificationIncluded: boolean;
+  verificationOmitted: boolean;
+};
+export function verifyGithubReleaseNotes({
+  body,
+  changelog,
+  version,
+  tag,
+  repository,
+}: {
+  body: unknown;
+  changelog: unknown;
+  version: unknown;
+  tag: unknown;
+  repository: unknown;
+}): {
+  matches: boolean;
+  actualSize: {
+    characters: number;
+    bytes: number;
+  };
+  body: unknown;
+  mode: string;
+  size: {
+    characters: number;
+    bytes: number;
+  };
+  verificationIncluded: boolean;
+  verificationOmitted: boolean;
+};
+export const GITHUB_RELEASE_BODY_MAX_CHARACTERS: 125000;
+export const GITHUB_RELEASE_BODY_MAX_BYTES: 125000;
+export type ShippedBaselineExclusion = {
+  ref: string;
+  count: number;
+  pullRequests: number[];
+};