Prevent workstation path publication

[kreneskyp]

Summary

• remove the identified internal scratch locator from the current tracked tree and replace it with durable citations, source identities, explicit inputs, or neutral local-checkout markers
• require explicit repository inputs for the two external comparison-extension installers
• add a non-echoing added-lines guard for Unix, root, Windows, and tilde-home workstation paths
• include the Task 240 outside-review packet and an explicit evidence-integrity audit

Validation

• focused privacy guard tests: 3/3 pass
• branch-wide added-lines guard: pass
• current-tree internal locator audit: zero matches
• git diff check and cargo fmt: pass
• isolated ecaz-cli build: pass with one existing warning
• both installer commands fail at argument parsing with exit 2 when repository input is absent

The repository-wide script runner retains seven unrelated baseline failures caused by two already-absent scripts; the packet records them without claiming a full-run pass.

Boundary

This repairs the current tree and prevents recurrence. It does not rewrite Git history or purge hosted refs and caches. Other legacy workstation paths also remain and are disclosed in the review packet; any history-wide remediation needs a separate destructive-change decision.