Correct stale comments left by numbered ids and the image editor, and drop a dead Workspace id retry

[dormouse-bot]

Comments, one spec table cell, two rationale/spec sentences, and test type annotations still described behavior that recent merges changed. One dead helper goes with them. Nothing here changes runtime behavior; CI's typecheck and test suites are the verification.

Left by numbered Surface/Workspace ids (#1085)

• standalone/src-tauri/src/lib.rs: the registry field said Workspaces sit "under their stable refs" (refs are gone), and ClosedWindow said its snapshot was built "with fresh ids", though windowReopenSnapshot now keeps the closed window's ids marked reopened (as push_closed_window's own doc already says).
• lib/src/lib/workspace-store.ts: freshWorkspaceId retried generateWorkspaceId() until no Workspace held the id, but the id pool's mint already loops on inUse: hasWorkspace — the same test — so the retry could never run. Callers now call generateWorkspaceId() directly.
• use-dor-control.ts / use-tool-run-end.ts comments, and test response types in reopen.test.tsx and WorkspaceWindow.test.tsx, still named surfaceRef/workspaceRef; the answers carry surfaceId/workspaceId. One test title still said "positional ref".

Left by the image editor (#1148)

• docs/specs/tutorial.md: the playground refuses view-only PNG/JPEG too (PlaygroundViewers.open in website/src/lib/playground-fs/viewers.ts), not only non-image formats.
• dor-tools-builtin/viewer/images-panel.tsx: localImagePath's path is what the images/, edit/, and image-save/ routes take, not file/.

Elsewhere

• docs/specs/security-audit.md Embargo table: a disclosure issue is one per ledger issue, matching the Disclosure section and archiveId in scripts/security-audit-public-body.mjs (a finding that returns after its fix gets a second disclosure).
• docs/specs/security-local.rationale.md: remote_host_state_dir doesn't exist; the DACL-locked directory is burrow_state_dir.
• lib/src/remote/burrow/store.ts: dropped the claim that ENROLLMENT_KEY lives apart so the extension host avoids remote-lib-common; vscode-ext/src/burrow-store.ts already imports enrollment.ts, which pulls it in.
• terminal-state-store.ts: ALT_GROUND_SCAN is global (/g), not sticky. pty-core.js: the ps branch is macOS only.
• App.test.tsx: installNotice() returns null when missing, so not.toBeUndefined() could never fail; it now asserts not.toBeNull().

No regression test: the only code change removes an unreachable loop.

[cloudflare-workers-and-pages]

Deploying mouseterm with    Cloudflare Pages

Latest commit:	0e4eae9
Status:	✅  Deploy successful!
Preview URL:	https://490b889c.mouseterm.pages.dev
Branch Preview URL:	https://nightly-stale-comments-2026.mouseterm.pages.dev

View logs