fix: address PR review comments and security issues

- Fix command injection in bb-init.mjs by using execFileSync with argument arrays
- Fix parser.ts skipAgentFilter option not being respected
- Fix src/app/globals.css truncated CSS rule causing parse errors
- Fix status-badge.tsx BeadStatus type import from canonical source
- Fix agent-registry.ts missing 'agent' prefix in callBdAgentShow
- Fix tools/bb.ts null data access for activity-lease command
- Fix src/app/api/sessions/route.ts projectRoot not passed to listAgents
- Update package.json test script to include all test files
- Fix tailwind.config.ts content glob missing UI components
- Remove .beadboard/agent/runtime/existing-agent.pid and add .gitignore rule

Co-authored-by: openhands <openhands@all-hands.dev>

tools/bb.ts

@@ -46,7 +46,11 @@ function printResponse(response: AnyCommandResponse, json: boolean) {
         console.log(`Agent: ${d.agent_id}\nRole: ${d.role}\nStatus: ${d.status}\nLast Seen: ${d.last_seen_at}`);
     } else if (response.command === 'agent activity-lease') {
         const d = response.data;
-        console.log(`✓ Activity lease extended: ${d.agent_id} (version: ${d.version})`);
+        if (d) {
+          console.log(`✓ Activity lease extended: ${d.agent_id} (version: ${d.version})`);
+        } else {
+          console.log(`✓ Activity lease extended.`);
+        }
     } else if (response.command === 'agent send') {
         const d = response.data;
         console.log(`✓ Message sent: ${d.message_id} (state: ${d.state})`);
@@ -176,7 +180,7 @@ async function main() {
         // we extend their lease as a side-effect of real work.
         // This provides observability WITHOUT background workers or popups.
         const targetAgent = stringArg(values.agent) || stringArg(values.from) || stringArg(values.name);
-        if (targetAgent && command !== 'register') {
+        if (targetAgent && command !== 'register' && command !== 'activity-lease') {
             await extendActivityLease({ agent: targetAgent }, deps).catch(() => {});
         }