The restore guard covers every test file Bun runs and its patch tools cannot leave a patch in place

The restore guard scans every file Bun discovers; the patch factory refuses a patch made after its cleanup ran; destructured copies of guarded roots are treated as the root; aliases are resolved by lexical scope; and each fixture write is asserted on its own.

Found by the post-merge audit of #576 and #583; verified on main.