- delete the gitea-fix-ci credential suite (13 cases covering secret redaction, cross-origin redirect refusal and header injection); the script keeps those behaviours but nothing guards them now - stop pointing at the tsl-syntax lookup recall suite from data/README.md: that suite was never committed and is now deleted, leaving --check as the only guard for lexicon/page correspondence