fix(rules): extend isCodePath for mts/cts/mjs/cjs/kts/scala/groovy parity

[joaovictor91123]

Summary

• Extend isCodePath in src/rules/advisory.ts with .mts, .cts, .mjs, .cjs, .kts, .scala, and .groovy so it matches isCodeFile/SOURCE_FILE_EXTENSION parity.
• Add regression test mirroring the existing Vue/Svelte/Astro and Dart parity cases in test/unit/rules.test.ts.

Closes #9322

Scope

• Focused rules-only change (2 files), Closes #9322.
• Duplicate gate: no other open PR for fix(rules): advisory.ts's isCodePath is missing .mts/.cts/.mjs/.cjs/.kts/.scala/.groovy that isCodeFile recognizes #9322; issue still open on main.

Validation

• Targeted regression test for all seven extensions.
• Full CI — scoped --changed selection should stay narrow (same shape as merged fix(signals): render discouragedPaths in onboarding-pack preview markdown #9336: src/signals + 2 files, green CI).

Safety

• No secrets or UI changes.

UI Evidence

N/A.

Notes

• Avoids src/queue/processors.ts hub path so scoped CI does not fan out to the full suite / pre-existing selfhost-pg-retention flake (see open maintainer fix: close the remaining 5 pre-existing test failures on main #9285).

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[codecov]

❌ 3 Tests Failed:

Tests completed	Failed	Passed	Skipped
11210	3	11207	16

View the top 2 failed test(s) by shortest run time

test/unit/selfhost-pg-retention.test.ts > runRetentionPrune + processJob on the Postgres backend (#977) > processJob prune-retention deletes eligible rows and records a success audit event on Postgres

Stack Traces | 0.00585s run time

AssertionError: expected 3 to be +0 // Object.is equality

- Expected
+ Received

- 0
+ 3

 ❯ test/unit/selfhost-pg-retention.test.ts:119:44

test/unit/selfhost-pg-retention.test.ts > pruneExpiredRecords on the Postgres backend (#977) > deletes across multiple bounded batches and stops at the per-table cap, same as the SQLite path

Stack Traces | 0.0146s run time

AssertionError: expected +0 to be 4 // Object.is equality

- Expected
+ Received

- 4
+ 0

 ❯ test/unit/selfhost-pg-retention.test.ts:76:33

View the full list of 1 ❄️ flaky test(s)

test/unit/salvageability.test.ts > resolveAiReviewSalvageableHold > defaults: no configured floor uses the gate default, and a confidence-less blocker counts as certainty (at/above floor)

Flake rate in main: 100.00% (Passed 0 times, Failed 14 times)

Stack Traces | 0.0073s run time

AssertionError: expected undefined to be defined
 ❯ test/unit/salvageability.test.ts:88:18

To view more test analytics, go to the Test Analytics Dashboard
_{📋 Got 3 mins? Take this short survey to help us improve Test Analytics.}

[joaovictor91123]

Closing - CI failed on the same 3 pre-existing test failures (selfhost-pg-retention, salvageability) tracked by maintainer #9285 (still open). Our
ules.test.ts change is unrelated; src/rules/advisory.ts fans out to ~458 scoped test files (not narrow like signals/onboarding-pack). Will reopen after #9285 merges and main CI is green (one-shot policy).