fix(gate): close the gaps in the plan-code guard, the button lists and the tooling

- planCodes: the quote and slash lookarounds let the commonest form through (a docstring or test
  title opening with a code, a slash pair); the two real exceptions (an episode titled "E1", ruff's
  E4/E7/E9) are now named and cut first, with cases that fail on the old pattern. audit_metrics
  counts by the same definition.
- button-primitive: both file lists live in the rule body, out of sight of the snapshot and the
  register; each is now pinned to its exact set of ui/ files (red when either is widened).
- check.sh --brief shows a short log whole and keeps the line before each hit, so ruff's rule and
  eslint's file path survive the excerpt.
- lint-changed runs prettier over every changed frontend file, as the gate does, not only code.
- CLAUDE.md and gates.md no longer claim the basedpyright baseline was found harmless: it was never
  triaged, and the reportOptional* entries are the likeliest real bugs.

frontend/src/lib/gates.snapshot.json

@@ -1323,10 +1323,15 @@
       "  rm -f \"$out\"",
       "}",
       "brief_excerpt() {",
-      "  local hits",
-      "  hits=\"$(grep -v -E '^testdb-[0-9]+ ' \"$1\" |",
-      "    grep -E -i -A 2 -m 20 'error|fail|✗|×|warn|would reformat|unused|vulnerab|found [0-9]')\"",
-      "  if [ -n \"$hits\" ]; then printf '%s\\n' \"$hits\"; else tail -n 20 \"$1\"; fi",
+      "  local log hits",
+      "  log=\"$(grep -v -E '^testdb-[0-9]+ ' \"$1\")\"",
+      "  if [ \"$(printf '%s\\n' \"$log\" | wc -l)\" -le 60 ]; then",
+      "    printf '%s\\n' \"$log\"",
+      "    return",
+      "  fi",
+      "  hits=\"$(printf '%s\\n' \"$log\" |",
+      "    grep -E -i -B 1 -A 2 -m 20 'error|fail|✗|×|warn|would reformat|unused|vulnerab|found [0-9]')\"",
+      "  if [ -n \"$hits\" ]; then printf '%s\\n' \"$hits\"; else printf '%s\\n' \"$log\" | tail -n 20; fi",
       "}",
       "ruff_pinned() {",
       "  local pin host",