refactor(lint): max-file-lines markers drop filler word, name real category

Rewrites the file-size exemption markers to the `max-file-lines:
<category> — <reason>` contract: the `legitimate` filler is gone and
each marker now names what the file is.

Author: jdalton

packages/cli/scripts/sea-build-utils/downloads.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 /* oxlint-disable-next-line socket/no-file-scope-oxlint-disable -- legitimate file-scope: domain-grouped layout or test fixture; per-call would produce many redundant disables. */
 /* oxlint-disable socket/prefer-exists-sync -- fs.stat()/lstat() calls read .size / .isFile() for cache validation, size reporting, and chmod checks; not existence checks. */
 

packages/cli/scripts/test-sea.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 /**
  * Unified SEA test script with multiple execution modes. Consolidates
  * test-sea-standalone, test-sea-vfs, and test-sea-with-tools.

packages/cli/src/commands/fix/cmd-fix.mts

@@ -1,6 +1,6 @@
 /* oxlint-disable-next-line socket/no-file-scope-oxlint-disable -- legitimate file-scope: domain-grouped layout or test fixture; per-call would produce many redundant disables. */
 /* oxlint-disable socket/no-logger-newline-literal -- CLI output formatting: multi-line user-facing messages where embedded \n produces the intended layout. Splitting into logger.log("") + logger.log(...) pairs is the canonical rewrite but doesnt preserve the visual flow for these specific outputs. */
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 import { existsSync } from 'node:fs'
 import path from 'node:path'
 

packages/cli/src/commands/fix/coana-fix.mts

@@ -1,6 +1,6 @@
 /* oxlint-disable-next-line socket/no-file-scope-oxlint-disable -- legitimate file-scope: domain-grouped layout or test fixture; per-call would produce many redundant disables. */
 /* oxlint-disable socket/no-logger-newline-literal -- CLI output formatting: multi-line user-facing messages where embedded \n produces the intended layout. Splitting into logger.log("") + logger.log(...) pairs is the canonical rewrite but doesnt preserve the visual flow for these specific outputs. */
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 import { promises as fs } from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'

packages/cli/src/commands/manifest/setup-manifest-config.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 import { existsSync } from 'node:fs'
 import path from 'node:path'
 

packages/cli/src/commands/scan/cmd-scan-create.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 import path from 'node:path'
 
 import { joinAnd } from '@socketsecurity/lib-stable/arrays/join'

packages/cli/src/commands/scan/create-scan-from-github.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 import { existsSync, mkdtempSync, promises as fs } from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'

packages/cli/src/constants.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 /**
  * Barrel file that re-exports all constants from the /src/constants/ directory.
  * This provides a single entry point for accessing all Socket CLI constants.

packages/cli/src/util/cli/with-subcommands.mts

@@ -1,6 +1,6 @@
 /* oxlint-disable-next-line socket/no-file-scope-oxlint-disable -- legitimate file-scope: domain-grouped layout or test fixture; per-call would produce many redundant disables. */
 /* oxlint-disable socket/no-logger-newline-literal -- CLI output formatting: multi-line user-facing messages where embedded \n produces the intended layout. Splitting into logger.log("") + logger.log(...) pairs is the canonical rewrite but doesnt preserve the visual flow for these specific outputs. */
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 import { getCI } from '@socketsecurity/lib-stable/env/ci'
 import { getSocketApiToken } from '@socketsecurity/lib-stable/env/socket'
 import {

packages/cli/src/util/dlx/spawn-pycli.mts

@@ -1,4 +1,4 @@
-/* max-file-lines: legitimate — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
+/* max-file-lines: cohesive-module — tracks one cohesive module domain; splitting would scatter tightly coupled helpers. */
 /**
  * Python CLI spawn utilities. These use bundled Python from SEA VFS or download
  * portable Python via DLX.