fix: suppress false positive security hotspots in test files

Add NOSONAR comments to test code that uses:
- Math.random() for generating random test data (not crypto)
- /tmp/test as mock output directory (not production code)

Author: Ondrej Machala

src/sync/tests/parallelCapture.test.ts

@@ -380,7 +380,7 @@ describe('captureParallel error handling', () => {
 
     const options: ParallelCaptureOptions = {
       jobs: [],
-      outputDirectory: '/tmp/test',
+      outputDirectory: '/tmp/test', // NOSONAR - test fixture path, not used in production
       captureOptions: { format: 'png', quality: 80 },
       browserOptions: { viewport: { width: 1280, height: 800 } },
       workers: 2,

src/tests/session.test.ts

@@ -223,7 +223,7 @@ describe('session file operations', () => {
       // Write random bytes that don't follow encryption format
       const randomBytes = Buffer.alloc(100);
       for (let i = 0; i < 100; i++) {
-        randomBytes[i] = Math.floor(Math.random() * 256);
+        randomBytes[i] = Math.floor(Math.random() * 256); // NOSONAR - intentionally using non-crypto random for test data
       }
       writeFileSync(sessionPath, randomBytes);