The dry run inspected Node and Bun command lines through PowerShell, which
writes its own startup cache into the user's profile, so a dry run changed a
file. Dry runs now preview with tasklist only and report how many Node or Bun
programs are running; a real run still does the full inspection.