Normalize CRLF in the contract tests; count every rollback leg in bun.lockb e2e

- json_envelope's contract tests read CLI_CONTRACT.md through one
  LF-normalized copy, so a Windows checkout (CRLF) no longer misses the
  ```jsonc fence (review thread on #1273; full-scope test windows).
- e2e_bun_lockb's shared-bundled case also has an agent copy that fails
  (hash_mismatch on a bundled copy the patch never touched); with #1066's
  all-leg counter, `failed` is the hosted refusal plus those agent failures.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

Author: mikolalysenko

crates/socket-patch-cli/src/json_envelope.rs

@@ -1379,8 +1379,15 @@ mod tests {
     }
 
     /// The ```jsonc block under `heading` in CLI_CONTRACT.md.
+    /// CLI_CONTRACT.md with LF line endings: a Windows checkout may carry
+    /// CRLF, which the `"```jsonc\n"` fence match below would miss.
+    fn contract_doc() -> &'static str {
+        static DOC: std::sync::OnceLock<String> = std::sync::OnceLock::new();
+        DOC.get_or_init(|| include_str!("../CLI_CONTRACT.md").replace("\r\n", "\n"))
+    }
+
     fn contract_block(heading: &str) -> &'static str {
-        let doc = include_str!("../CLI_CONTRACT.md");
+        let doc = contract_doc();
         let at = doc
             .find(heading)
             .unwrap_or_else(|| panic!("{heading} missing"));
@@ -1457,7 +1464,7 @@ mod tests {
             object_keys(value["files"][0].clone()),
             "files[] keys"
         );
-        let doc = include_str!("../CLI_CONTRACT.md");
+        let doc = contract_doc();
         for action in [
             PatchAction::Discovered,
             PatchAction::Downloaded,

crates/socket-patch-cli/tests/e2e_bun_lockb.rs

@@ -146,7 +146,16 @@ fn rollback_refuses_binary_hosted_pin_then_checkout(
         assert_eq!(env["error"]["code"], "rollback_failed", "{env}");
         assert_eq!(env["alreadyOriginal"], 0, "{env}");
     }
-    assert_eq!(env["failed"], 1, "{env}");
+    // `failed` spans every leg (#1066): the refused hosted pin plus any
+    // agent copy that could not be restored (a bundled copy the patch never
+    // touched reports `hash_mismatch`).
+    let agent_failed = env["results"]
+        .as_array()
+        .into_iter()
+        .flatten()
+        .filter(|r| r["success"] == false)
+        .count();
+    assert_eq!(env["failed"], 1 + agent_failed, "{env}");
     let failed = env["hosted"]["failed"]
         .as_array()
         .cloned()