test(diff): cover the exact token-product safe-size boundary

Mutation testing found a survivor: flipping the size-guard's > to >=
still passed the full suite because no test exercised a product
exactly at MAX_DIFF_TOKEN_PRODUCT, only values far beyond it. The
limit is meant to reject strictly-over, not the boundary itself.

Author: ctkrug