fix: remove remaining workflow invoke surfaces

crates/ticket/src/config.rs

@@ -1115,7 +1115,7 @@ launch_prompt = "$workspace/ticket/reviewer/launch"
         for role in TicketRole::ALL {
             assert!(scaffold.contains(&format!("[ticket.roles.{role}]")));
             assert!(scaffold.contains(&format!(
-                "[ticket.roles.{role}]\nprofile = \"{}\"\nworkflow = \"{}\"",
+                "[ticket.roles.{role}]\nprofile = \"{}\"",
                 role.default_profile()
             )));
         }

crates/tui/src/app.rs

@@ -3324,7 +3324,7 @@ mod completion_flow_tests {
     }
 
     #[test]
-    fn live_system_item_workflow_appends_system_message_block() {
+    fn live_legacy_workflow_system_item_is_ignored() {
         let mut app = App::new("test".into());
         let item = serde_json::json!({
             "kind": "workflow",
@@ -3333,10 +3333,7 @@ mod completion_flow_tests {
         });
         app.handle_worker_event(Event::SystemItem { item });
 
-        assert!(matches!(
-            app.blocks.as_slice(),
-            [Block::SystemMessage { text }] if text == "[Workflow /build]\nRun the build"
-        ));
+        assert!(app.blocks.is_empty());
     }
 
     #[test]

crates/worker/src/discovery.rs

@@ -1064,8 +1064,6 @@ fn discovery_error_to_tool_error(error: WorkerDiscoveryError) -> ToolError {
 #[cfg(test)]
 mod tests {
     use super::*;
-    use std::sync::Mutex;
-
     use manifest::{Permission, ScopeRule};
     use protocol::stream::JsonLineWriter;
     use protocol::{Alert, AlertLevel, AlertSource};
@@ -1077,6 +1075,7 @@ mod tests {
     use tokio::net::UnixListener;
 
     use crate::runtime::dir::RuntimeDir;
+    use crate::runtime::worker_allocation::test_util::RuntimeDirSandbox;
 
     #[derive(Clone)]
     struct FailTargetPeerStore {
@@ -1118,18 +1117,13 @@ mod tests {
         }
     }
 
-    static ENV_LOCK: Mutex<()> = Mutex::new(());
-
     #[tokio::test(flavor = "current_thread")]
     async fn state_backed_visibility_and_restore_planning() {
-        let _env = ENV_LOCK.lock().unwrap();
         let root = TempDir::new().unwrap();
         let store_dir = root.path().join("store");
         let runtime_base = root.path().join("runtime");
         std::fs::create_dir_all(&runtime_base).unwrap();
-        unsafe {
-            std::env::set_var("YOI_RUNTIME_DIR", &runtime_base);
-        }
+        let _runtime_sandbox = RuntimeDirSandbox::new(&runtime_base);
 
         let store = FsWorkerStore::new(&store_dir).unwrap();
         let session_id = new_session_id();

crates/worker/src/runtime/worker_allocation.rs

@@ -12,7 +12,7 @@ mod mutate;
 mod table;
 
 #[cfg(test)]
-mod test_util;
+pub(crate) mod test_util;
 
 pub use conflict::{
     ConflictOwner, find_conflict_owner, find_conflict_owners, is_within_effective_write,