fix: repair failing tests and broken docs link

- Fix 3 quarantine tests that expected "pending" but got "approved":
  add Quarantined: true to server config since auto-approve is now
  the default for non-quarantined servers
- Fix broken Docusaurus link: remove .md extension from cross-doc
  link (Docusaurus uses path slugs, not filenames)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: claude

docs/features/code-execution.md

@@ -233,7 +233,7 @@ const user: User = { name: input.username };
 - TypeScript support uses type-stripping only (no type checking or semantic validation)
 - Valid JavaScript is also valid TypeScript
 - Transpilation errors return the `TRANSPILE_ERROR` error code with line/column information
-- See [Code Execution Overview](../code_execution/overview.md#typescript-support) for comprehensive TypeScript documentation
+- See [Code Execution Overview](../code_execution/overview#typescript-support) for comprehensive TypeScript documentation
 
 ## Best Practices
 

internal/runtime/tool_quarantine_test.go

@@ -34,7 +34,7 @@ func setupQuarantineRuntime(t *testing.T, quarantineEnabled *bool, servers []*co
 
 func TestCheckToolApprovals_NewTool_PendingStatus(t *testing.T) {
 	rt := setupQuarantineRuntime(t, nil, []*config.ServerConfig{
-		{Name: "github", Enabled: true},
+		{Name: "github", Enabled: true, Quarantined: true},
 	})
 
 	tools := []*config.ToolMetadata{
@@ -261,7 +261,7 @@ func TestCheckToolApprovals_AutoApproved_ThenChanged_StillBlocked(t *testing.T)
 
 func TestApproveTools(t *testing.T) {
 	rt := setupQuarantineRuntime(t, nil, []*config.ServerConfig{
-		{Name: "github", Enabled: true},
+		{Name: "github", Enabled: true, Quarantined: true},
 	})
 
 	// Create pending tools
@@ -293,7 +293,7 @@ func TestApproveTools(t *testing.T) {
 
 func TestApproveAllTools(t *testing.T) {
 	rt := setupQuarantineRuntime(t, nil, []*config.ServerConfig{
-		{Name: "github", Enabled: true},
+		{Name: "github", Enabled: true, Quarantined: true},
 	})
 
 	// Create pending tools