fix: code cleanup — path traversal, test leaks, dead code, consistency

- Add path traversal protection to GET /api/cases/:name and fix-plan
- Use safePathSchema for LinkCaseSchema.path
- Fix QR auth test timer leak (afterAll → afterEach) and env var try/finally
- Remove dead terminal size check after Zod validation in resize route
- Remove no-op sampleCount guard in adaptive timing
- Replace hardcoded values with constants in notification-manager and subagent-windows
- Add Zod validation to POST /api/auth/revoke
- Use _apiPut instead of raw fetch in subagent-windows
- Add SwipeHandler.cleanup() for consistency with other mobile handlers
- Move NiceConfig/ProcessStats from types/plan.ts to types/common.ts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/respawn-adaptive-timing.ts

@@ -76,11 +76,6 @@ export class RespawnAdaptiveTiming {
    * @returns Completion confirm timeout in milliseconds
    */
   getAdaptiveCompletionConfirmMs(): number {
-    // Need at least 5 samples before adjusting
-    if (this.timingHistory.sampleCount < 5) {
-      return this.timingHistory.adaptiveCompletionConfirmMs;
-    }
-
     return this.timingHistory.adaptiveCompletionConfirmMs;
   }