ci(affinescript-tea): download Chromium via the e2e package's browsers script

SonarCloud S6505 read `playwright install` (a browser download) as a
package install lacking --ignore-scripts; the download now runs as
`bun run browsers` from affinescript-tea/e2e/package.json.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Author: hyperpolymath

.github/workflows/ci.yml

@@ -122,11 +122,11 @@ jobs:
         # input, async commands, keyed reorder preserving DOM-node identity,
         # subscriptions. Playwright is pinned in e2e/bun.lock.
         working-directory: affinescript-tea/e2e
-        # `bun x`, not `bunx`: the digest-verified Bun release zip that
-        # scripts/install-bun.sh installs ships only the `bun` binary.
+        # Chromium comes from the e2e package's `browsers` script (the pinned
+        # Playwright's own download; no package lifecycle scripts run).
         run: |
           bun install --frozen-lockfile --ignore-scripts
-          bun x --no-install --bun playwright install --with-deps chromium
+          bun run browsers
           opam exec -- bun test --timeout 60000
       - name: affinescript-router + affinescript-crdt tests
         # Router.affine's pure functions and Crdt.affine's property tests

affinescript-tea/e2e/package.json

@@ -4,7 +4,8 @@
   "type": "module",
   "description": "Browser tests for the AffineScript TEA runtime (Tea.affine + tea_host.js).",
   "scripts": {
-    "test": "bun test --timeout 60000"
+    "test": "bun test --timeout 60000",
+    "browsers": "playwright install --with-deps chromium"
   },
   "devDependencies": {
     "playwright": "1.62.1"