chore(debt): re-measure Debtfile probes

.machine_readable/Debtfile.a2ml

@@ -39,8 +39,8 @@ forgotten.
 ### gate-scripts-without-tests
 - description: Scripts under scripts/ with no matching scripts/tests/<name>-test.sh — a gate with no test has never been shown able to fail Re-baselined 2026-09-22 (round 2, issue #953): the committed count had fossilized at 31 while the tree measured 38+; set to measured 40 with a declared ceiling raise. Falls automatically as tests land.
 - probe: n=0; for f in $(git ls-files 'scripts/*.sh'); do b=$(basename "$f" .sh); case "$b" in *-test) continue;; esac; if [ ! -f "scripts/tests/${b}-test.sh" ] && [ ! -f "scripts/tests/${b#check-}-test.sh" ] && [ ! -f "scripts/tests/${b#run-}-test.sh" ]; then n=$((n+1)); fi; done; echo "$n"
-- count: 32
-- ceiling: 32
+- count: 31
+- ceiling: 31
 - severity: high
 - policy: remediable
 - tri: eliminate
@@ -51,8 +51,8 @@ forgotten.
 ### todo-fixme-markers
 - description: Files carrying a TODO or FIXME marker. Advisory — a marker is a note to self, not a defect Re-baselined 2026-09-22 (round 2, issue #953): fossilized at 77, measured 80. Probe corrected 2026-10-06: `*.ncl.in` templates are excluded, because their `TODO` fields are placeholders by design (copy, then fill in every TODO), not notes to self; measured 84.
 - probe: git grep -I -l -E '\b(TODO|FIXME)\b' -- . ':(exclude).machine_readable/Debtfile.a2ml' ':(exclude)docs/DEBTFILE-SPEC.adoc' ':(exclude)*.ncl.in' | wc -l
-- count: 84
-- ceiling: 84
+- count: 83
+- ceiling: 83
 - severity: low
 - policy: remediable
 - tri: control
@@ -92,7 +92,7 @@ forgotten.
 ### deno-residue
 - description: Deno residue in this repository after the Bun ruling. The required JS/TS gate is now `scripts/check-ts-allowlist.sh` (bash + awk); `scripts/check-ts-allowlist.deno.js` is RETAINED DELIBERATELY as a compatibility shim, not as residue. governance-reusable fetches `scripts/` at floating `ref: main` while consumers pin the workflow YAML, so deleting the shim breaks every consumer whose pinned YAML still invokes it — MEASURED 2026-09-04 at 269 repos. Owner ruled Deno REMOVED and Bun permanent (said three times, reaffirmed 2026-08-07). Must reach 0, but only via the three-phase retirement: shim (done, PR #730) -> repin consumers (task #59) -> delete. The probe counts non-comment matches only (refined 2026-09-22: the three remaining mentions — two workflow retirement notes plus one comment inside the shim — are documentation, not residue, and a probe that punishes documentation is a broken metric). Excludes */bindings/deno/, which is interop for OTHER people's Deno code and a separate question.
 - probe: git grep -hE "denoland/setup-deno|deno run|deno test|deno fmt|deno lint" -- ".github/workflows/*.yml" "scripts/*" | grep -vE '^\s*(#|//)' | wc -l
-- count: 0
+- count: 3
 - ceiling: 1
 - severity: medium
 - policy: remediable