fix(runner): close static scanner path bypasses

[steipete]

Summary

• make static-scanner and direct judge-prompt exclusions type-aware, so regular files named .git, node_modules, vendor, or .venv are scanned while real directories remain excluded
• traverse __pycache__ and emit explicit high-severity evidence for packaged Python bytecode instead of silently hiding it as a skipped directory
• detect Python process-execution APIs so the exact .git payload from [Bug]: clawscan-static skips .git files (not just directories) (malicious skill example that bypasses this scanner) #40 produces a finding
• carry both findings and bytecode omission markers into judge prompt evidence

The built-in judge workspace already copied __pycache__; the transitive blind spot was in scanner evidence and direct target.files rendering. This keeps the separate workspace .git exclusion intact so worktree pointers are not copied.

Proof

• Before: the [Bug]: clawscan-static skips .git files (not just directories) (malicious skill example that bypasses this scanner) #40 .git fixture reported skipped path and zero findings.
• Before: the [Bug]: __pycache__ skipped by clawscan-static and transitively by LLM judge (v0.1.6) #39 unchecked-hash .pyc fixture reported its __pycache__ directory as skipped path and zero findings.
• After: the same fixtures report static.python_process_execution on .git and static.python_bytecode on the full .pyc path.
• A clean skill and a legitimate .git pointer remain finding-free; a real node_modules directory remains excluded.

Commands run:

TMPDIR=/private/tmp go test -count=1 ./...
TMPDIR=/private/tmp go vet ./...
make docs-site
.agents/skills/autoreview/scripts/autoreview --mode local ...

All passed. The first default-TMPDIR suite run exposed an existing macOS /var versus /private/var alias assertion; rerunning with the canonical /private/tmp path passed every package.

Thanks @nedlir for the concrete bypass fixtures, and @Patrick-Erichsen for maintaining this scanner surface.

Fixes #39
Fixes #40

[clawsweeper]

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.