Test-only helpers shared across the workspace: golden-file harness, the testscript runner,
temp-directory and free-port allocators, and small assertion utilities. Every dependent takes
it as a [dev-dependencies] entry, so no production build resolves it.
Goldenfile regeneration is opt-in through UPDATE_TESTFILES and its aliases; nothing here
ever rewrites a goldenfile on its own.