test(cli): cover fix-plan repair safety metadata

[EfeDurmaz16]

Summary

• add CLI coverage for fix-plan safety metadata
• assert the plan remains non-applying while preserving repair id and safety fields
• cover the agent-facing TYP009 repair contract

Validation

• npm run build:test --silent
• node --test .zero/test-js/*.test.js (fails on two existing executable-run tests in this macOS environment: dyld missing LC_UUID; new fix-plan test passes)
• git diff --check

[vercel]

@EfeDurmaz16 is attempting to deploy a commit to the Vercel Labs Team on Vercel.

A member of the Team first needs to authorize it.