CI rejects hosted Ubuntu multicall coreutils in installer tests #110

Problem

The hosted CI rerun for PR #109 passed package installation, then failed three existing Hush installer tests on the current base. The test-only Swift diff does not touch these Rust files.

Evidence

Run https://github.com/AojdevStudio/agentic-utilities/actions/runs/43040603697/attempts/2 failed in bun run check.

/usr/bin/wc is not a trusted native program (/usr/lib/cargo/bin/coreutils/wc has other hard links)
/usr/bin/printf is not a trusted native program (/usr/lib/cargo/bin/coreutils/printf has other hard links)
test result: FAILED. 254 passed; 3 failed; 5 ignored

Failing tests:

• install::native_host_tests::a_helper_that_reads_its_token_finishes_within_its_budget
• install::native_host_tests::unreadable_or_oversized_output_is_an_error_not_a_partial_result
• install::native_signal_tests::a_helper_keeps_its_status_when_sigchld_is_inherited_ignored

The workflow uses ubuntu-latest at .github/workflows/ci.yml:25. Native executable custody rejects extra hard links in bws-tui/src/install/custody.rs:209. Preserve that security check while reconciling the CI image and native-program contract.

Acceptance

Run the unchanged installer tests and full CI on the selected supported Linux environment. Show that native-program custody still rejects unsafe hard links. Keep the correction separate from PR #109.