Fix Fleet AI and LOTL test regressions after parallel merges.

Stub slow syscheck/listen-port probes in agent tests, fix ai_snapshot mutex deadlock, reorder fleet clearance vs connectivity checks, and add AI control precedence plus LotlTimeline vitest coverage.

agent/client/mining_diagnostics_test.go

@@ -63,18 +63,26 @@ func TestMiningDiagnosticsJSONShape(t *testing.T) {
 
 func TestInferMiningBlockersRemotePause(t *testing.T) {
 	c := testDiagnosticsClient(t, config.RuntimeConfig{})
-	c.pool.PauseRemote()
-
-	d := c.collectMiningDiagnostics()
+	d := MiningDiagnostics{
+		C2Connected: true,
+		CPU: struct {
+			RemotePaused     bool    `json:"remote_paused"`
+			ScheduleBlocked  bool    `json:"schedule_blocked"`
+			ResourcesBlocked bool    `json:"resources_blocked"`
+			HasJob           bool    `json:"has_job"`
+			Hashrate         float64 `json:"hashrate_hps"`
+		}{RemotePaused: true},
+	}
+	blockers := c.inferMiningBlockers(d)
 	found := false
-	for _, b := range d.LikelyBlockers {
+	for _, b := range blockers {
 		if strings.Contains(b, "remote command") || strings.Contains(b, "container delegation") {
 			found = true
 			break
 		}
 	}
 	if !found {
-		t.Fatalf("expected remote pause blocker, got %v", d.LikelyBlockers)
+		t.Fatalf("expected remote pause blocker, got %v", blockers)
 	}
 }