fix(core): cap workspace Oxlint subprocesses

[aidenybai]

What changed

• share one bounded worker-slot pool across concurrent CLI and API project scans
• begin subprocess timeout accounting only after a queued scan acquires a slot
• re-check scan deadlines after queueing so expired work does not start
• consolidate dead-code scan throttling onto the same tested slot primitive

Why

Concurrent workspace scans could each create their own Oxlint subprocess budget, allowing process counts to multiply with project count. This keeps the existing scan behavior while bounding aggregate subprocess pressure for one invocation.

Regression review

• added FIFO, concurrency, release-on-error, and abort coverage for worker slots
• added CLI and API multi-project tests proving the pool is shared
• caught and fixed stale test mocks during the full suite
• focused tests, full test suite, lint, typecheck, formatting, build, JSON-report smoke test all pass
• React Doctor changed-scope scan: 100/100, no issues
• patch changeset included

This PR is independent and targets main. The larger architecture rewrite was preserved separately and is no longer part of this review.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/eslint-plugin-react-doctor@1463

npm i https://pkg.pr.new/oxlint-plugin-react-doctor@1463

npm i https://pkg.pr.new/react-doctor@1463

commit: 5b70e00

[github-actions]

React Doctor found no new issues. 🎉

_{Reviewed by React Doctor for commit 5b70e00.}

[github-actions]

Interactive terminal E2E

Recorded from the built CLI at 5b70e00 in a real terminal. The fixture holds Git busy for three seconds, so Scanning... must appear immediately after project selection, then exercises the compact interactive report.

Download the GIF and MP4 artifact

[cursor]

Cursor Bugbot has reviewed your changes using high effort and found 1 potential issue.

There are 3 total unresolved issues (including 2 from previous reviews).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 7a296f8. Configure here.}