refactor(ci): port source and test report checks to TypeScript

[kmbroai]

Summary

Run the portable-source checker and JUnit inventory comparator from TypeScript using the supported Node.js runtime so these CI utilities no longer require Python.

Changes

• Replace the two Python utilities and the source-checker test with typed .mts files, removing three Python files.
• Preserve source byte limits, Markdown checks, tracked-file handling, JUnit outcomes, duplicate detection, and shard matching.
• Update workflow callers, help, regression tests, strict TypeScript checks, formatting, and LF checkout attributes.
• Add XML parsing and glob matching as development dependencies.

Testing

• Node 22.13.0 source-checker tests: 9 passed; canonical plugin source check passed.
• Report-comparison and workflow safeguard tests: 294 passed.
• Compared 26 source/XML cases against the original Python implementations: matching results.
• SDK type and formatting checks passed.
• Full SDK suites with seeds 12345 and 3570533375: each had 2,137 passes, 41 skips, and zero failures.
• Independent code reviews and the final committed-head review gate passed with no actionable findings.

Risk and rollout

This change affects CI tooling and development dependencies. The TypeScript scripts use native type stripping on Node 22.13.0, and their callers suppress the type-stripping warning to preserve command output. The comparison job installs its parsing dependencies before processing the existing Bun JUnit reports. The plugin runtime and its remaining Python tests continue through the existing checks.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
🔒 Security Review	✅ Completed 2026-08-31T23:30:23.340129Z	e374e65	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.