#11618 fix(ci): ever-connect may use the Ever ID sign-in plugin's entry point; cspell ignores ULIDs

Fixes two develop checks that went red with #11567 (merge d5c974b874). Both were green on the previous tip be0848dc56.

Egress audit → import-boundary.test.mjs › "the tree crosses no boundary"

• #11567 makes the connection consume the Ever ID sign-in plugin's ports (EVER_ID_ACCOUNTS, EVER_CONNECT_CONFIG, the account events) through @gauzy/plugin-auth-zitadel. The boundary still said "the connection and the Ever ID sign-in plugin never import each other".
• The boundary now matches the design, which is dependency inversion:
  • The sign-in plugin never imports the connection. This rule is unchanged.
  • The connection uses the sign-in plugin only through its entry point, never its files and never its web part.
• The connection still works without the plugin loaded: when its port is unbound, the handlers answer account_deletion_pending / export_not_available.
• New known-bad fixture connect-imports-zitadel-file.ts. Its deep import and its web-part import fail; its entry-point import is allowed. New unit assertions cover both directions.
• The header comment and tools/egress-audit/README.md are updated to match.

cspell

• The ULIDs in the ever-connect specs (01J…, 26 Crockford base32 characters) are ignored by pattern /\b[0-7][0-9A-HJKMNP-TV-Z]{25}\b/g.
• evit (the Ever instance token prefix) is added as a word.

Verified locally

• ESLINT_PREFIX=… node --test tools/ever-platform/import-boundary.test.mjs: 6/6 pass, including the ESLint half. Before the change: "the tree crosses no boundary" failed with the same 10 findings as CI.
• cspell on the two flagged files and on every changed file: 0 issues.

Not touched: GraphQL Schema is red on develop since before this release (c7d15cc377, d5a8fb5914).

🤖 Generated with Claude Code

---

Summary by cubic

Fixes two develop CI checks that broke in #11567: the egress import boundary and cspell.

The import boundary now matches the actual design: the connection may use the Ever ID sign-in plugin through its entry point only, never its files or web part. The sign-in plugin still never imports the connection, and the connection works without the plugin loaded.

Bug Fixes

• Allows @gauzy/plugin-auth-zitadel entry-point imports from ever-connect; deep and web-part imports still fail.
• Adds a known-bad fixture and unit assertions covering both directions.
• Keeps cspell exceptions for ULIDs and evit local via inline // cspell:ignore directives.