chore(tooling): add lint/format gates, pin the toolchain, enforce commit checks

Adds the frontend's first linter and formatter — the Rust half has had
cargo fmt --check and clippy in CI for a while, while 274 TS/Svelte files had
only svelte-check. ESLint runs clean; 159 findings are recorded as warnings
rather than suppressed, so the backlog is visible without painting CI red.

Also: `bun run test` no longer drops into watch mode (the "Before Committing"
list told people to run a command that never returns), the traceability ratchet
moves 82% -> 88%, a pre-commit hook enforces the fast half of that list instead
of relying on memory, the dead webdriverio e2e suite and its five devDeps are
removed, and the Rust toolchain is pinned to 1.97.1 so the developer machine and
the CI builder image stop being five releases apart.

TRACES: | DR-205, DR-206, DR-207

src/lib/player/adapters/html5Adapter.ts

@@ -263,7 +263,6 @@ export class Html5PlayerAdapter implements PlayerAdapter {
     timeoutMs: number
   ): Promise<boolean> {
     return new Promise<boolean>((resolve) => {
-      let timer: ReturnType<typeof setTimeout>;
       const done = (fired: boolean) => {
         el.removeEventListener(event, listener);
         clearTimeout(timer);
@@ -271,7 +270,9 @@ export class Html5PlayerAdapter implements PlayerAdapter {
       };
       const listener = () => done(true);
       el.addEventListener(event, listener);
-      timer = setTimeout(() => done(false), timeoutMs);
+      // `done` closes over `timer`, but can only run once the listener fires or
+      // the timeout elapses — both strictly after this assignment.
+      const timer: ReturnType<typeof setTimeout> = setTimeout(() => done(false), timeoutMs);
     });
   }
 }