setup.ts network interception scope

Trap: packages/core/test/setup.ts looks like global network isolation because it replaces globalThis.fetch, but it intercepts only https://models.dev/api.json and delegates every other request to the original fetch. Fix: explicitly mock or deny other network paths in tests and validation, because the shared setup alone does not prevent live server or external-network access.