test(metadata-protocol): the bracketed-refusal pin follows the package door's throw site (#25467 cut 13)

refusePackagedBaseOverride's one `new Error(` moved with its body into
protocol-packaged-base-refusal.ts, so the scan gains that module's row with
its own count as the floor, as cuts 1, 3, 5, 6, 7, 10 and 12 added theirs.

Claude-Session: https://claude.ai/code/session_016SP1spj613tyGCgxoD1An6
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/metadata-protocol/src/protocol.bracketed-refusal-opener-absence.test.ts

@@ -90,6 +90,9 @@ const PRODUCERS: Readonly<Record<string, number>> = {
   // The publish backfill pair, moved out of `protocol.ts` whole on the same
   // terms.
   'protocol-publish-backfill.ts': 3,
+  // The package door's save refusal, moved out of `protocol.ts` whole on the
+  // same terms.
+  'protocol-packaged-base-refusal.ts': 1,
   'sys-metadata-repository.ts': 5,
   'runtime-authoring-gate.ts': 1,
 };