Fix template review findings: cruft, locale guard, docs, lint, config type-checking

[veillette]

• Remove stray "// hook test" / "// test" comments left in main.ts
• Extend the compile-time locale key-parity guard in StringManager to cover
  es (and document adding one line per new locale); previously only en<->fr
  were checked, so a missing key in es (or any future locale) passed tsc
• Drop the non-existent model.timer.timeSpeedProperty from TimeModel's doc
  example so the snippet compiles as written
• Add a tests/** biome override for useExplicitType so the template lints
  clean out of the box (matching the src/** and scripts/** overrides)
• Type-check the root *.config.ts files via tsconfig.scripts.json and switch
  playwright.config.ts to bracket access for process.env["CI"] to satisfy
  noPropertyAccessFromIndexSignature

Co-Authored-By: Claude Opus 4.8 noreply@anthropic.com
Claude-Session: https://claude.ai/code/session_01Hy8jfGtbrvpNDRxFfFx6ZA

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
npm/brace-expansion	5.0.7	🟢 7.3	Details Check Score Reason Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 4 Found 7/16 approved changesets -- score normalized to 4 Maintained 🟢 10 18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/brace-expansion	2.1.2	🟢 7.3	Details Check Score Reason Security-Policy 🟢 10 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 4 Found 7/16 approved changesets -- score normalized to 4 Maintained 🟢 10 18 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 9 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/fast-uri	3.1.4	Unknown	Unknown

Scanned Files

• package-lock.json