Creating a symlink on Windows needs Developer Mode or elevation, so every
test that plants one to prove containment or escape detection failed at
setup there. workflowScriptQuery planted its link at module scope and took
the whole file down at collection.

Add a once-per-process probe, @t3tools/shared/testing/symlinks, and gate
those tests on it across server, desktop, and scripts.

Co-Authored-By: Claude Code <noreply@anthropic.com>