fix: parallelize news CDN scan and add timeout to prevent test failure

[Copilot]

no-external-cdn.test.ts timed out scanning 5,499 HTML files sequentially against a 10s default timeout.

Changes

• Batch parallel I/O: findForbidden now processes files in Promise.all batches of 100 instead of sequential await per file (~7s vs >10s)
• Explicit timeout: Added 60_000ms timeout to the news article test case to accommodate CI environments with slower disk I/O

// Before: sequential reads — O(n) awaits
for (const f of files) {
  const text = await readFile(f, 'utf8');
}

// After: batched parallel — O(n/100) awaits
for (let i = 0; i < filtered.length; i += BATCH_SIZE) {
  const batch = filtered.slice(i, i + BATCH_SIZE);
  const results = await Promise.all(batch.map(async (f) => { ... }));
}

[github-actions]

🏷️ Automatic Labeling Summary

This PR has been automatically labeled based on the files changed and PR metadata.

Applied Labels: testing,size-s

Label Categories

• 🗳️ Content: news, dashboard, visualization, intelligence
• 💻 Technology: html-css, javascript, workflow, security
• 📊 Data: cia-data, riksdag-data, data-pipeline, schema
• 🌍 I18n: i18n, translation, rtl
• 🔒 ISMS: isms, iso-27001, nist-csf, cis-controls
• 🏗️ Infrastructure: ci-cd, deployment, performance, monitoring
• 🔄 Quality: testing, accessibility, documentation, refactor
• 🤖 AI: agent, skill, agentic-workflow

For more information, see .github/labeler.yml.

[github-actions]

🔍 Lighthouse Performance Audit

Category	Score	Status
Performance	85/100	🟡
Accessibility	95/100	🟢
Best Practices	90/100	🟢
SEO	95/100	🟢

📥 Download full Lighthouse report

Budget Compliance: Performance budgets enforced via budget.json

[Copilot]

Pull request overview

This PR improves the reliability of the “no external CDN” CI guard by speeding up the scan across thousands of rendered news HTML files and by setting an explicit per-test timeout suitable for slower CI disks.

Changes:

• Parallelized findForbidden() file scanning using Promise.all in fixed-size batches (100 files per batch) instead of sequential await per file.
• Added a 60_000ms timeout to the rendered news articles test to prevent Vitest default-timeout failures in CI.