chore: trim-paths, CoC segregation, release.yml tidiness, test assertions

[dean0x]

Summary

Address remaining small items: enable trim-paths = "all" in WASM builds (verified unreachable in CI), document CoC segregation of duties, verify rust-core fix planner ordering contract, and retune wall-clock test assertions with real red-run data.

Deferred Issues

From review [wave-v0.4.0-wave1/2026-08-19_1216]:

Finding	File:Line	Reason
compliance-04	packages/mds-wasm/dist/**	Verified unreachable via CI (0 tracked artifacts); trim-paths is a workspace profile change.
compliance-08	CODE_OF_CONDUCT.md:39	Segregation of duties requires a second responsible person to exist.
rust-05	crates/mds-core/src/lint/diagnostic.rs:931	Location refuted (no sort at fix.rs:519-535); reordering risks the AD-202-1 contract.
performance-05	.github/workflows/release.yml:286	Only risk-reducing release.yml changes belong pre-tag.
reliability-08	.github/workflows/release.yml:200	Cosmetic; do not churn the publish path for tidiness.
testing-08	scripts/test/verify-no-control-bytes.spec.mjs:397	Retune timing assertions with data from an actual red run, not preemptively.

Acceptance Criteria

• Enable workspace trim-paths = "all" for WASM builds
• Document CoC edit responsible-person requirement
• Verify AD-202-1 ordering invariant documented in fix.rs
• Collect wall-clock timing data from a failing test run
• Update timing assertions with empirical bounds

Related

• PR v0.4.0 Wave 1: breaking changes, live-bug fixes, and release-safety gates #308 (wave/v0.4.0-wave1)

For v0.5.0