Fix CI hang: skip Magic String Detector and scope scan paths

- Add timeout-minutes: 10 as job-level safety net
- Add --skip-magic-strings to prevent the known CI hang at that step
- Narrow --paths to dist/bin dist/lib (skip test fixtures which contain
  intentional antipatterns and inflate scan time)
- Add --no-log to avoid writing runtime log files during CI

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: noelsaw1

.github/workflows/ci.yml

@@ -51,6 +51,7 @@ jobs:
   performance-checks:
     name: Performance Checks
     runs-on: macos-latest
+    timeout-minutes: 10
 
     steps:
       - name: Checkout code
@@ -71,10 +72,14 @@ jobs:
           echo "Running performance audit on toolkit repository..."
 
           # Run in JSON mode for Slack integration
+          # --skip-magic-strings: prevents CI hang (Magic String Detector times out on large repos)
+          # --paths "dist/bin dist/lib": skip test fixtures which contain intentional antipatterns
           ./dist/bin/check-performance.sh \
-            --paths "." \
+            --paths "dist/bin dist/lib" \
             --format json \
             --strict \
+            --skip-magic-strings \
+            --no-log \
             > audit-results.json && EXIT_CODE=0 || EXIT_CODE=$?
 
           echo "exit_code=$EXIT_CODE" >> $GITHUB_OUTPUT