test(runtime): type the dropped-claim line reader in the OAuth organization pins

Co-Authored-By: Claude <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QyoWKK9RwUNxBxmevy9Neb

Author: claude

packages/runtime/src/security/resolve-execution-context.oauth-organization.test.ts

@@ -224,9 +224,9 @@ let warn: ReturnType<typeof vi.spyOn>;
 beforeEach(() => { warn = vi.spyOn(console, 'warn').mockImplementation(() => {}); });
 afterEach(() => { warn.mockRestore(); });
 
-const droppedClaimLines = () => warn.mock.calls
-  .map((c) => String(c[0]))
-  .filter((line) => line.includes('organization claim dropped (organization_membership_ended)'));
+const droppedClaimLines = (): string[] => warn.mock.calls
+  .map((c: unknown[]) => String(c[0]))
+  .filter((line: string) => line.includes('organization claim dropped (organization_membership_ended)'));
 
 describe('an OAuth token acts in the organization its consent bound — isolated posture, the real D10 middleware', () => {
   const r = rig('isolated');