docs(comments): no WebSocket and no CI in the present tense

The chat cut removed the only WebSocket and CI went before it, but comments still leaned on both:
`?account=` was justified by the socket, job polling by an in-process WS registry, the e2e flows as
"proxy-safe (none use the WebSocket)", and pyrightconfig named a CI container the engine contract
test never checked. Each now says what holds today (the wallet gate, no push channel, the two
contract test halves, the image build's `npm ci`, the gate).

scripts/check-node-modules.mjs

@@ -4,8 +4,8 @@
 // The local gate's frontend lanes run against the HOST's node_modules, and nothing tied that tree to
 // the lock: a `git pull` that bumped a dependency, or an `npm install` that was never committed, left
 // tsc/eslint/vitest judging the code against packages the build image (`npm ci`) does not use — a
-// green that proves nothing about what ships, in either direction. CI is immune (it runs `npm ci`);
-// this makes the local lanes say so instead of quietly differing.
+// green that proves nothing about what ships, in either direction. The image build is immune (it
+// runs `npm ci`); this makes the local lanes say so instead of quietly differing.
 //
 // Checks every package the lock places under node_modules/: present, at the pinned version. A package
 // marked `optional` may be absent (a platform binary for another OS). Exit 1 with the list and the