Fix Fleet AI and LOTL test regressions after parallel merges.

Stub slow syscheck/listen-port probes in agent tests, fix ai_snapshot mutex deadlock, reorder fleet clearance vs connectivity checks, and add AI control precedence plus LotlTimeline vitest coverage.

agent/client/vuln_scan_test.go

@@ -9,6 +9,10 @@ import (
 func TestRunVulnLOTLProbeMockedContext(t *testing.T) {
 	SetPostureCollector(func() *PostureReport { return nil })
 	defer SetPostureCollector(nil)
+	SetListenPortsCollector(func() *ListenPortsReport {
+		return &ListenPortsReport{Ports: []ListenPort{{Port: 443, Proto: "tcp"}}}
+	})
+	defer SetListenPortsCollector(nil)
 
 	origProbe := vulnprobeProbeHost
 	vulnprobeProbeHost = func(_ map[int]bool, _ string) vulnprobe.HostContext {