X_TEST_BARE_ERROR_UNSCANNED

no test file was read, so every package reported zero

a glob that matches nothing makes the ratchet enforce nothing and reads exactly like a clean tree — which is why it is a finding rather than a pass

edit TEST_GLOBS in scripts/test-fix-citations.ts so it matches this repo's test layout; that one glob list feeds this scanner too