[P1] Incrementally type-check packages/dredd/lib (.js → typed)

[dalberola]

Priority 1 of the modernization milestone. Now that strict is enabled (#26), progressively bring the 41 untyped .js files in packages/dredd/lib under the type checker. allowJs is on but checkJs is off, so today only the 6 .ts files are checked.

Strategy (incremental, one small PR per slice)

1. Opt files in with a top-of-file // @ts-check (lightest — no rename), fixing the few strict errors each surfaces (JSDoc types / guards). Start with small leaf utilities, work up to hot modules.
2. Once a file is @ts-check-clean and would benefit from real types, convert it .js → .ts.
3. When all lib/**/*.js are @ts-check/converted, flip checkJs: true (or finish removing allowJs) and drop the per-file pragmas.

Rules

• One branch + PR per slice (a few files at a time). Gate every merge on gh pr checks.
• No behavior change — types/guards only. Keep diffs reviewable.
• Prefer fixing a real unsafe access over an any cast; note any any escape hatches.

Done when

All packages/dredd/lib/**/*.js are type-checked (via @ts-check or conversion) and checkJs is enabled, with the build green under strict.

Tracking checklist will be updated per merged slice.

[dalberola]

Slice 1 merged in #31: // @ts-check + JSDoc on 4 leaf utilities — ignorePipeErrors.js, compileTransactionName.js, getProxySettings.js, expandTilde.js. Comment-only; build (strict) + lint + prettier green.

Progress: 4 / 41 lib/**/*.js type-checked.

[dalberola]

Slice 2 merged in #32: which.js, hooksLog.js, getGoBinary.js (the last with a small strict-narrowing fix). Progress: 7 / 41 lib/**/*.js type-checked. Note: logger.js deferred until createConsoleLogger.js is typed (its stderr param is under-typed).

[dalberola]

Slice 3 merged in #33: configUtils.js typed (utf8 read fix + output typing) and @types/js-yaml added so js-yaml imports type-check under strict. Progress: 8 / 41 lib/**/*.js. Note: index.js will stay untyped until the ESM migration (#29) — it deliberately mixes import + module.exports.

[dalberola]

Slice 4 merged in #34: typed the logging cluster dependency-first — createConsoleLogger.js (the Winston factory keystone; Console transport typed as an intersection carrying the runtime colorize/timestamp flags Winston's types don't model, plus an undefined-level guard on the gate — no behavior change), which unblocked the previously deferred logger.js and reporters/reporterOutputLogger.js (both // @ts-check now). Progress: 11 / 41 lib/**/*.js type-checked.