fix(gateguard): drop \x00 placeholder in glob-to-regex (eslint no-control-regex) (#2439)

Replace the NUL-byte '**' placeholder trick with split('**')/join('.*'),
which is semantically identical and lint-clean under eslint 10.

scripts/hooks/gateguard-fact-force.js

@@ -116,10 +116,9 @@ function getExemptMatchers() {
     .map(glob => {
       const source = glob
         .replace(/[.+^${}()|[\]\\]/g, '\\$&') // escape regex metachars, keep * and ?
-        .replace(/\*\*/g, '\x00')            // ** placeholder (cross-segment)
-        .replace(/\*/g, '[^/]*')               // * -> within a segment
-        .replace(/\x00/g, '.*')              // ** -> across segments
-        .replace(/\?/g, '.');
+        .split('**')                           // ** boundaries (cross-segment)
+        .map(part => part.replace(/\*/g, '[^/]*').replace(/\?/g, '.'))
+        .join('.*');                           // ** -> across segments
       try {
         return new RegExp(source);
       } catch (_) {