[thekevinbot]

Fixes #1258. Fixes #1274.

A config [[table]] glob now skips node_modules unless the glob names it, and follows symlinks, as a path-table does: **/*.js no longer lists node_modules/top.js or pkg/node_modules/dep/i.js; link.md -> top.md and linkdir/* (linkdir -> real) list their rows. Breaking.

Checked by hand: bash **/*.js lists node_modules/top.js (the approved node_modules divergence aside), and link.md, linkdir/* list link.md, linkdir/r.md; config table and path-table agree on all three.

Red commit: 1fae969, CI run 37410809404.

Changelog / Migrations

• Changelog fragment added under packages/{rust,python,ts}/changelog.d/
• Migration fragment with the same slug added under packages/{rust,python,ts}/migrations.d/

E2E Verification

• Ran e2e suites locally for every affected SDK
• Python e2e receipt pending: main's Python e2e is red on glob_speed_depth_bound_test until Test one-level glob listings at speed of light #1317 merges; full-suite receipt will be written then.
• TypeScript SDK e2e: pass
• Rust core: lib and the config glob, scanner, from_config tests pass; watcher tests fail locally with Too many open files from the shared host
• packages/ts/e2e-attestations/<branch>.json receipt written
• Command(s) run: just e2e-attest-ts