refactor: sanitize Rust codebase, batch 11 (2026-10-24)

Continues #3225.

Files modified

.github/workflows/pr-regression-gates.yml
package.json
scripts/containers.json
scripts/sanitizing_baseline.mjs
scripts/sanitizing_containers.mjs
scripts/sanitizing_disk_access.mjs
scripts/sanitizing_tests.mjs
src-tauri/module-arcs.txt
src-tauri/src/agent_update.rs
src-tauri/src/agent_update/install.rs
src-tauri/src/agent_update/tests/agent_install.rs
src-tauri/src/capture/catalog.rs
src-tauri/src/capture/catalog/tests.rs
src-tauri/src/cli/role_experiment/commands.rs
src-tauri/src/cli/role_experiment/fake_run.rs
src-tauri/src/cli/role_experiment/report.rs
src-tauri/src/cli/role_experiment/resume.rs
src-tauri/src/cli/role_experiment/storage.rs
src-tauri/src/cli/role_experiment/tests.rs
src-tauri/src/config.rs
src-tauri/src/config/agency_cache.rs
src-tauri/src/config/environment.rs
src-tauri/src/config/sessions_persistence/tests/replacement.rs
src-tauri/src/config/settings.rs
src-tauri/src/config/settings/agent/instance.rs
src-tauri/src/config/settings/project_path/migration.rs
src-tauri/src/config/settings/save.rs
src-tauri/src/config/settings/save/lock.rs
src-tauri/src/config/settings/tests/lock_debug_and_id_hash_schema.rs
src-tauri/src/config/settings/tests/save_backups_and_diagnostics.rs
src-tauri/src/filesystem.rs
src-tauri/src/filesystem/tests.rs
src-tauri/src/lib.rs
src-tauri/src/process.rs
src-tauri/src/process/tests.rs
src-tauri/src/startup.rs
src-tauri/src/testability/window_placement.rs
src-tauri/tests/c4_state_key_census.rs
src-tauri/tests/spawn_search_path_inventory.rs

Census pending

None yet. (5 files counted in 0176550, room-30)

Scope decided by the user (2026-10-24), from the batch 10 design proposals:

G04 steps 1-3 (room-30): RoleExperiment Attempts owned by cli::role_experiment::storage; first gate sanitizing:containers. R4 (concurrency/publication policy) deferred.
G07 P1-P3 (room-32): new pub(crate) owner src-tauri/src/filesystem.rs; Catalog::load migrated; gate sanitizing:disk_access.
G08 P1-P4 (room-33): 7 exposed static made private behind their owners (encapsulate, no state removed).
G09 P2 then P1 (room-34): config/environment.rs for the window placement variable; new owner src-tauri/src/process.rs (is_running moved from config/agency_cache.rs).
Not authorized: G06, G07 hardening, G08 scope changes, G09 D2/D3.
Branch starts at 66c2cf1 (batch 10 tip, PR refactor: sanitize Rust codebase, batch 10 (refs #3225) #3226 not merged yet).