chore(repo): 显式声明行尾规则并恢复 tests 目录追踪

仓库此前没有 .gitattributes，行尾完全依赖 core.autocrlf=true。源文件在工作区
是 CRLF，而 esbuild 产物（public.css / public.min.css、运行时 .min.js）是 LF，
两种行尾混在同一套自动转换策略下：每次构建都会把产物整文件标记为已修改，真正的
改动反而被行尾噪音淹没。

- 新增 .gitattributes：源文件（php / js / cjs / vue / json / css / md 等）统一
  text eol=crlf，与既有工作区一致；构建产物（assets/css/build/**、
  assets/css/main.min.css、assets/js/runtime/*.min.js、assets/js/build/**）
  强制 text eol=lf，与 esbuild 输出一致；.gitattributes / .gitignore 自身用
  eol=lf，避免规则文件自己先被转换
- .gitignore 改为反向规则：先以 !/tests/ 放行整个目录，再逐个排除仅本地使用的
  条目（visual-results、widget-golden 夹具、5 个 widget-system 用例、run.php、
  scratch harness）。此前 tests/navigation/ 从未被放行，只靠历史追踪才没有从
  仓库里消失——一旦有人重新 clone，相关用例就会缺文件
- 顺带纳入 /.workbuddy/

验证：git ls-files --eol 确认源文件为 CRLF、构建产物为 LF；git status --ignored
确认仅本地条目仍处于忽略状态，反向规则没有意外放行本地用例。改动不触及运行时
代码与测试断言，node --test tests/**/*.test.cjs 370 项全部通过。

.gitignore

@@ -4,80 +4,37 @@
 /.compare/
 /.zcode/
 /.mimosa/
+/.workbuddy/
 
 # Project planning, internal docs, and local-only development files
 /.aksrt-chrome-profile/
 /.specs/
 /docs/
+
+# tools/: 只版本化两个共享入口，其余为本地脚本。
 /tools/*
 !/tools/build-public-assets.mjs
-/tests/*
 !/tools/wp-cli-visual-fixtures.php
-!/tests/fixtures/
-!/tests/visual/
-/tests/fixtures/*
-!/tests/fixtures/page-visual-matrix-v1.json
-!/tests/widget-system/
-/tests/widget-system/*
-!/tests/widget-system/post-editor-reference-contract.test.cjs
-!/tests/widget-system/post-visual-contract.test.cjs
-!/tests/widget-system/lazyload-contract.test.cjs
-!/tests/widget-system/toast-contract.test.cjs
-!/tests/widget-system/page-display-contract.test.cjs
-!/tests/widget-system/icon-card-contract.test.cjs
-!/tests/widget-system/page-display-save-harness.php
-!/tests/widget-system/admin-ui-contract.test.cjs
-!/tests/widget-system/email-system-contract.test.cjs
-!/tests/widget-system/auth-source-contract.test.cjs
-!/tests/widget-system/captcha-business-contract.test.cjs
-!/tests/widget-system/captcha-security-harness.php
-!/tests/widget-system/captcha-runtime-harness.test.cjs
-!/tests/widget-system/oauth-security-contract.test.cjs
-!/tests/widget-system/oauth-security-harness.php
-!/tests/widget-system/user-badges-contract.test.cjs
-!/tests/widget-system/user-features-contract.test.cjs
-!/tests/widget-system/zibll-modern-widgets-contract.test.cjs
-!/tests/widget-system/user-card-runtime-contract.test.cjs
-!/tests/widget-system/user-card-runtime-harness.php
-!/tests/widget-system/notification-preferences-contract.test.cjs
-!/tests/widget-system/message-center-contract.test.cjs
-!/tests/widget-system/message-center-url-harness.php
-!/tests/widget-system/message-center-pagination-harness.php
-!/tests/widget-system/asset-ledger-contract.test.cjs
-!/tests/widget-system/financial-flow-contract.test.cjs
-!/tests/widget-system/user-assets-layout-contract.test.cjs
-!/tests/widget-system/pay-orders-filter-contract.test.cjs
-!/tests/widget-system/front-submit-editor-contract.test.cjs
-!/tests/widget-system/front-submit-attachment-contract.test.cjs
-!/tests/widget-system/comment-smilies-removal-contract.test.cjs
-!/tests/widget-system/comment-children-list-reset-contract.test.cjs
-!/tests/widget-system/comment-image-upload-contract.test.cjs
-!/tests/widget-system/pay-card-contract.test.cjs
-!/tests/widget-system/circular-button-icon-margin-contract.test.cjs
-!/tests/widget-system/single-cover-height-contract.test.cjs
-!/tests/widget-system/frontend-lifecycle-contract.test.cjs
-!/tests/widget-system/card-pass-universal-redeem.test.cjs
-!/tests/widget-system/card-pass-modal-redeem.test.cjs
-!/tests/widget-system/balance-charge-modal.test.cjs
-!/tests/widget-system/vip-points-exchange-modal.test.cjs
-!/tests/widget-system/pay-sdk-order-contract.test.cjs
-!/tests/admin/
-/tests/admin/*
-!/tests/admin/charge-cards-page-contract.test.cjs
-!/tests/admin/charge-cards-dependency.test.cjs
-!/tests/admin/charge-cards-pagination.test.cjs
-!/tests/admin/charge-cards-form-constraints.test.cjs
-!/tests/admin/card-pass-order-numbers.test.cjs
-!/tests/front-submit/
-/tests/front-submit/*
-!/tests/front-submit/video-cover-contract.test.cjs
-!/tests/front-submit/featured-buttons-contract.test.cjs
-!/tests/front-submit/editor-fullscreen-contract.test.cjs
-!/tests/asset-ledger/
-!/tests/asset-ledger/*.php
-!/tests/visual/docker-compose.zibll.yml
-!/tests/visual/zibll-Caddyfile
-!/tests/visual/README.md
+
+# tests/: 放行整个套件，按名字排除本地专有产物。
+#
+# 这里刻意从「逐文件白名单」改为「先放行目录、再逐个排除」的反向写法：
+# 白名单要求每新增一个 *.test.cjs 都同步改本文件，一旦漏改，该测试文件会静默
+# 不被跟踪，在 CI 上表现为「测试数量莫名变少」，且极难排查。反向写法下新增测试
+# 自动纳入版本控制，只有确需本地专有的文件才需要追加排除。
+#
+# 下列 10 个路径是切换前就已处于「忽略且未跟踪」状态的本地专有文件，逐一保留原状。
+!/tests/
+/tests/visual-results/
+/tests/fixtures/widget-golden-v1.json
+/tests/widget-system/a11y-contract.test.cjs
+/tests/widget-system/admin-core.test.cjs
+/tests/widget-system/captcha-cloud-contract.test.cjs
+/tests/widget-system/comment-hard-cut-contract.test.cjs
+/tests/widget-system/download-config-contract.test.cjs
+/tests/widget-system/run.php
+/tests/widget-system/scratch-term-aggregation-harness.php
+
 /CLAUDE.md
 /AGENTS.md
 ask-*.md