improve(ci): replace boundary guards with focused Oxlint rules (#95368)

* perf(ci): move boundary guards to oxlint

Co-authored-by: Sash Zats <sash@zats.io>

* fix(ci): avoid dead editor URL export

Co-authored-by: Sash Zats <sash@zats.io>

* fix(ci): declare path-loaded boundary guard roots

Co-authored-by: Sash Zats <sash@zats.io>

* fix(ci): model Oxlint plugin export in Knip

Co-authored-by: Sash Zats <sash@zats.io>

---------

Co-authored-by: Peter Steinberger <steipete@gmail.com>

test/fixtures/oxlint-boundary-guards/raw-window-open-violation.ts

@@ -0,0 +1,12 @@
+window.open("https://example.com");
+globalThis.open("https://example.com");
+(window as Window).open("https://example.com");
+(window.open as typeof window.open)("https://example.com");
+window?.open?.("https://example.com");
+const open = window.open;
+const { open: openWindow } = window;
+window["open"]("https://example.com");
+app.window.open("https://example.com");
+(window satisfies Window).open("https://example.com");
+// window.open("https://example.com");
+const text = "window.open('https://example.com')";

test/fixtures/oxlint-boundary-guards/register-http-handler-violation.ts

@@ -0,0 +1,7 @@
+plugin.registerHttpHandler(() => {});
+(plugin.registerHttpHandler as (handler: () => void) => void)(() => {});
+plugin?.registerHttpHandler?.(() => {});
+const register = plugin.registerHttpHandler;
+const { registerHttpHandler } = plugin;
+plugin["registerHttpHandler"](() => {});
+(plugin.registerHttpHandler satisfies (handler: () => void) => void)(() => {});