fix: remove duplicate const declarations, fix broken test/contracts/config — closes #38

[rishab11250]

Description

Fixes issue #38 — the WorkflowRuntime.execute() method crashed at parse time due to duplicate const declarations. Also fixes 5 additional bugs introduced by PRs #33 and #34 that left the code in a broken state.

Changes

packages/core/src/lib/runtime.ts (4 fixes)

• Deleted duplicate first-draft loop (lines 80-131) — PR fix runtime tenant tracing events #34 added a redundant execution loop that declared const state and const results, but kept the original retry-enabled loop below it with identical declarations. This caused SyntaxError: Identifier 'state' has already been declared.
• Moved workflow.started event — relocated from the deleted loop to the retry-enabled loop so the event is still published.
• Fixed runStepWithRetry caller args — was passing args.correlationId as the tenantId parameter and attempt as correlationId. All step events (tool.called, llm.requested) had wrong tenant and correlation IDs.
• Fixed runStep method signature — had orphaned parameter declarations and two ): Promise<...> { return-type declarations, making it invalid TypeScript.
• Added missing tenantId to the startSpan call in the second loop — the call was missing this required field, causing Zod validation failures.

packages/contracts/src/index.ts (1 fix)

• Removed duplicate kind field in traceSpanSchema — the schema had two kind declarations. The second (narrower) one overwrote the first, silently dropping 'memory' and 'trigger' span types from validation.

packages/core/src/lib/config.ts (1 fix)

• Removed merge artifact issue-30-auth-disabled-false bare string literal.
• Removed duplicate AUTH_DISABLED declaration — z.coerce.boolean().default(true) was overriding the booleanEnv preprocessor.

packages/core/src/lib/runtime.test.ts (1 fix)

• Closed unclosed it() and describe() blocks — the first test suite was never terminated, causing a parse error.
• Removed duplicate import block that was injected in the middle of the file with no enclosing scope.
• Merged missing type imports (ExecutionSnapshot, TraceSpan, PulseInfra) into the top-level import block.

Testing

• ✅ All 15 tests across 7 test files pass
• ✅ TypeScript compilation: clean (both @pulsestack/contracts and @pulsestack/core)
• ✅ No changes pushed to main — branch fix/issue-38-duplicate-const-declarations only

Related Issues

• Closes [Bug]: WorkflowRuntime.execute() crashes at parse time due to duplicate const declarations #38
• Related to Title: Runtime events lost tenant isolation and valid trigger steps failed tracing #31 (PR fix runtime tenant tracing events #34 fix introduced the regressions)
• Related to AUTH_DISABLED=false still disabled authentication #30 (PR fix auth disabled env parsing #33 fix introduced the config merge artifact)