fix(cli): write the ESC byte as its escape text in the dev-TLS pin test

`check:nul-bytes` caught a raw 0x1b that a scripted edit materialised out of
the escape sequence while the test was asserting ABOUT that byte — the exact
slip the gate's header says every occurrence in this repo came from.

Claude-Session: https://claude.ai/code/session_01TSf4DV7ziu4V5j73e46b7c
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude

packages/cli/src/utils/dev-tls-contract.test.ts

@@ -206,7 +206,7 @@ describe('formatIncompleteDevTlsPairNotice — both halves, and the way out', ()
   it('carries no raw control bytes — colouring happens at the call site', () => {
     for (const given of [DEV_TLS_CERT_FLAG, DEV_TLS_KEY_FLAG] as const) {
       // eslint-disable-next-line no-control-regex
-      expect(formatIncompleteDevTlsPairNotice(given)).not.toMatch(/\[/);
+      expect(formatIncompleteDevTlsPairNotice(given)).not.toMatch(/\u001b\[/);
     }
   });
 });