Preserve plural Foundry test roots across invariant handoffs #212

Summary

The invariant-suite handoff assumes every repository uses test/, but Aave v4 at the benchmark commit 6959e3219b5506bf2acae18551cbb2a68a5b8fba uses the plural Foundry test root tests/ (tests/Base.t.sol, tests/invariants/...). The current generated workflow filters git ls-files to test/, requires test_paths to start with test/, and resets generated tests under test/foundry/. As a result, generated Recon/Chimera sources under a repository's existing tests/ convention can be omitted from the durable suite and downstream campaign worktrees.

Expected behavior

Detect and preserve the repository's actual test roots (at least test/ and tests/) while retaining path traversal/sensitive-root protections. Generated test materialization and retry cleanup should use the selected root, and implementation/test provenance should validate against the selected root(s). Add regression coverage using an Aave-like tests/ fixture.

Reproduction evidence

At the pinned Aave commit:

git ls-files test   # 0
git ls-files tests | head
# tests/Base.t.sol
# tests/Constants.sol
# tests/Utils.sol

This blocks the intended property specification -> invariant scaffolding -> Recon handoff from being reliable for the target.