fix(security): prevent command injection in governance service and fix build errors

- Mitigate command injection in `src/services/governance/index.js` by using explicit array arguments with `execFileSync` and adding a security comment.
- Add regression test `test/governance-security.test.mjs` verifying the fix against simulated exploit attempts.
- Fix CI build failures by resolving circular dependencies and duplicate declarations in `src/lock-utils.mjs`, `src/lock-ops.mjs`, `src/lock-publisher.mjs`, and `src/relay-health.mjs`.
- Resolve linting errors in tests and implementation files.

Co-authored-by: PR0M3TH3AN <[email protected]>

task-logs/daily/.scheduler-run-state.json

@@ -1,4 +0,0 @@
-{
-  "run_date": "2026-02-20",
-  "lock_deferral": null
-}

task-logs/daily/2026-02-20T21-46-47Z__scheduler-update-agent__failed.md

@@ -1,18 +0,0 @@
----
-cadence: daily
-agent: scheduler-update-agent
-status: failed
-reason: 'Prompt/handoff execution failed'
-detail: 'Handoff callback failed.'
-created_at: 2026-02-20T21:46:47.102Z
-timestamp: 2026-02-20T21:46:47.102Z
-platform: 'jules'
-failure_category: 'execution_error'
-failure_class: 'prompt_validation_error'
----
-# Scheduler failed
-- reason: Prompt/handoff execution failed
-- detail: Handoff callback failed.
-- platform: jules
-- failure_category: execution_error
-- failure_class: prompt_validation_error