fix(install): preserve paid app destinations

[SebastienElet]

Summary

• keep paid-app skip mode from creating fake Flow, Things 3, or DaisyDisk bundles
• preserve replayability by leaving missing destinations absent while reporting the skipped state
• exercise the real public Make targets with temporary destinations and a substituted installation provider

Validation

• bun test tooling/paid-apps.test.ts — 10 passed
• bun test — 313 passed, 4 skipped
• bun run format:typescript:check
• bun run lint
• bun run typecheck
• safe make -sBn for flow, things-3, and daisydisk

Fixes #229

[SebastienElet]

Repair record

Review completed on b34b0f3149c52bf936729103ec8138d968615b6c: paid-app skip mode leaves destinations absent, a later normal run installs each missing app once, and existing destinations remain untouched; the final diff and 18 real Make invocations establish those transitions.

Corrections pushed:

• Rebased onto main at 045fdee0cdc2362f26612ff8a089a727faca789d — mechanism: the stale head omitted the CI timeout correction, allowing Bun's implicit 5-second limit to kill a valid subprocess test at 5000.61 ms; proof: the workflow contract failed before the command changed, then the final local barrier and both GitHub Bun jobs passed with the explicit 15-second suite timeout.

Not repaired:

• None.

Barrier: behavior tier on macOS 26.6.2 arm64 with Bun 1.4.0 — TypeScript format checked 103 files; lint and typecheck reported 0 errors and 0 warnings; 314/317 tests passed, 3 external integrations skipped, 0 failed, with 1522 assertions across 35 files; 3/3 paid-app Make dry-runs were valid. Limits: Ubuntu was not reproduced locally, no real App Store purchase was exercised, and make all was not run locally because it mutates the host; GitHub's macOS and Ubuntu deployment jobs and both Bun jobs passed on this head.