test: mutation testing — break dotup on purpose and check the suite notices

Each file in .tests/mutations/ is one deliberate bug: what it breaks, why that
matters, the assertion meant to catch it, and an OLD/NEW pair applied to a copy
of the tree. A mutation is KILLED only when the suite fails AND the named
assertion is among the failures — failing for an unrelated reason is reported
as WRONG-TEST, because that is luck, and luck is lost the next time the
unrelated test moves. A mutation whose OLD block no longer matches is STALE
rather than quietly skipped.

19 reproduces the DU-C1 shape: a comment moved back inside the fzf
line-continuation. It is killed by "dotup pick exits 0".

.tests/mutations/06-private-unattended-guard-inverted.mut

@@ -0,0 +1,11 @@
+# what: cmd_private's unattended guard, inverted
+# why:  an unattended run would sit at a password prompt nobody is there to answer
+# kills: --unattended: nobody is here to type it
+# run:  unit
+<<<OLD
+	if [ "$UNATTENDED" -eq 1 ]; then
+		warn "unattended: the private tier needs a password nobody is here to type — skipped"
+<<<NEW
+	if [ "$UNATTENDED" -ne 1 ]; then
+		warn "unattended: the private tier needs a password nobody is here to type — skipped"
+<<<END