chore: 5 issues closed as completed without code fixes landing

[rickcedwhat-ai]

Problem

Five issues filed in the 2026-06-23 GBU report were closed as COMPLETED but their fixes are not present in any commit since that date (only one commit landed: 1bbeb6f fix(ci): support major-only version tags in Dependabot auto-merge regex).

The following items remain in source exactly as they were on 2026-06-23:

Issue	Still in code
#319	codeql-analysis.yml:13 still references package-lock.json (repo uses pnpm)
#320	_hasPaginated dead variable still in useTable.ts:116 and useTable.ts:356
#322	Sort stabilization timeout still hardcoded at 10 000 ms (useTable.ts:432)
#323	_isLocator private API check still in smartRow.ts:350
#325	generateConfig still prints "GEMINI / ChatGPT" (useTable.ts:558)

These were apparently closed prematurely. Tracking this issue so the fixes are not silently lost.

[rickcedwhat-ai]

Audit results:

• chore: CI hygiene — codeql uses package-lock.json, bot-listener on Node 20 #319 (CodeQL package-lock.json): already fixed — pnpm-lock.yaml is referenced
• chore: delete dead _hasPaginated variable in useTable.ts #320 (dead _hasPaginated var): already removed
• fix: sort stabilization timeout is hardcoded and not configurable #322 (sort stabilization hardcoded): fixed in this PR — 3 configurable LoadingStrategy fields added
• chore: replace _isLocator private API check with duck-type in smartRow.ts #323 (_isLocator private API): code already used .count(); stale comment cleaned up in this PR
• chore: generateConfig hardcodes "GEMINI / ChatGPT" vendor names #325 (generateConfig branding): already fixed — says "AI assistant" not "GEMINI / ChatGPT"

All 5 items resolved. Closing via PR #397.