chore(test): type security test bodies, drop unused eslint-disable

Keeps the new security regression tests within the tests/ no-explicit-any budget and removes an unused eslint-disable directive flagged by the linter.

tests/unit/acp-agents-route.test.ts

@@ -124,8 +124,8 @@ test("POST /api/acp/agents rejects an interpreter eval payload (GHSA-jphr-2gw7-x
       token
     )
   );
-  const body = (await response.json()) as any;
+  const body = (await response.json()) as { error?: string };
 
   assert.equal(response.status, 400);
-  assert.match(body.error, /Invalid versionCommand/i);
+  assert.match(body.error ?? "", /Invalid versionCommand/i);
 });

tests/unit/authz/proxy-matcher-case.test.ts

@@ -1,6 +1,5 @@
 import { test } from "node:test";
 import assert from "node:assert/strict";
-// eslint-disable-next-line @typescript-eslint/no-require-imports
 import { createRequire } from "node:module";
 
 import { config } from "../../../src/proxy.ts";