Boots the REAL generated worker against real Pyodide, under a real Content-Security-Policy, and exercises the parts no Bun test can reach: the boot-time install, the namespace seal, the import gate and the post-seal egress boundary.