fix(ego-lint): skip JSDoc block comments in R-WEB-06 document.* check (#150)

## Summary

- Add `skip-comments: true` to R-WEB-06 (`\bdocument\.` pattern) so it
no longer matches inside JSDoc `/** ... */` block comments or `//`
single-line comments
- No new infrastructure needed — `apply-patterns.py` already supports
`skip-comments: true` with full block-comment state tracking

## Motivation

Field testing forge (2026-03-22) surfaced a false positive:

```
lib/css/index.js:439: DOM APIs (document.*) are not available in GJS
```

Line 439 is a JSDoc comment: `* Parse document.` — the word appears as
English prose in a vendored CSS parser (`reworkcss/css`), not as actual
DOM API usage. The file contains zero real `document.*` calls, making
this a pure false positive.

## Test Plan

- Updated `tests/fixtures/web-apis/extension.js` with a JSDoc comment
containing `document.` (lines 3–6) plus the existing real
`document.querySelector()` call
- Added `assert_output_count` assertion verifying R-WEB-06 fires
**exactly once** (real call only, JSDoc skipped)
- Baseline: 567 passed, 125 failed → after fix: 568 passed, 125 failed
(+1 pass, 0 new failures)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Solomon <sol@nanoclaw.dev>

Author: ZviBaratz

rules/patterns.yaml

@@ -66,6 +66,7 @@
   pattern: "\\bdocument\\."
   scope: ["*.js"]
   severity: blocking
+  skip-comments: true
   message: "DOM APIs (document.*) are not available in GJS"
   category: web-apis
   fix: "GJS has no DOM. Use GObject/Clutter/St/GTK widgets instead."

tests/fixtures/web-apis/extension.js

@@ -1,10 +1,14 @@
 import {Extension} from 'resource:///org/gnome/shell/extensions/extension.js';
 
+/**
+ * Parse document.querySelectorAll results into an array.
+ * This is a JSDoc comment — document. here must NOT trigger R-WEB-06.
+ */
 export default class WebApisExtension extends Extension {
     enable() {
         setTimeout(() => {}, 100);
         const xhr = new XMLHttpRequest();
-        document.querySelector('.foo');
+        document.querySelector('.foo'); // real DOM call — MUST trigger R-WEB-06
         clearTimeout(this._timer);
         clearInterval(this._interval);
     }

tests/run-tests.sh

@@ -123,6 +123,7 @@ assert_exit_code "exits with 1 (has failures)" 1
 assert_output_contains "fails on setTimeout" "\[FAIL\].*R-WEB-01"
 assert_output_contains "fails on XMLHttpRequest" "\[FAIL\].*R-WEB-04"
 assert_output_contains "fails on document.*" "\[FAIL\].*R-WEB-06"
+assert_output_count "R-WEB-06 fires exactly once (JSDoc comment skipped)" "\[FAIL\].*R-WEB-06" 1
 assert_output_contains "fails on clearTimeout" "\[FAIL\].*R-WEB-10"
 assert_output_contains "fails on clearInterval" "\[FAIL\].*R-WEB-11"
 echo ""