Rewrite onboarding prose to a neutral voice

tests/README.md

@@ -13,7 +13,7 @@ bash tests/test_doctor.sh
 
 ## Inventory
 
-- **`test_forge_auth.py`** — `scripts/forge_auth.py` unit tests: PKCE
+- **`test_forge_auth.py`**: `scripts/forge_auth.py` unit tests: PKCE
   pair generation, HMAC state signing + CSRF rejection,
   `ForgeAuthConfig.from_env` validation (loopback-only redirect,
   missing port, missing env vars, `FORGE_GITEA_USERNAME`
@@ -22,19 +22,19 @@ bash tests/test_doctor.sh
   read/write/merge/`has_live_gitea_token`, `auth_store_path`
   precedence, `run_logout`, `main()` dispatcher.
 
-- **`test_git_credential_forge.py`** — `scripts/git-credential-forge.py`
+- **`test_git_credential_forge.py`**: `scripts/git-credential-forge.py`
   unit tests: credential protocol I/O, host/scheme/port matching,
   live-token fast-path, pass-through for missing store or non-matching
   host, expired-token refresh, refresh-failure handling, `store`/`erase`
   no-ops, `main()` dispatcher.
 
-- **`test_forge_auth_integration.py`** — end-to-end Python integration
+- **`test_forge_auth_integration.py`**: end-to-end Python integration
   tests against `tests/mock_oidc_server.py`: full PKCE flow,
   gateway-required schema on disk, idempotent re-login, refresh token
   rotation with server-side revocation, logout preserving
   gateway-bearer fields.
 
-- **`test_forge_auth_integration.sh`** — shell end-to-end: drives
+- **`test_forge_auth_integration.sh`**: shell end-to-end: drives
   `forge_auth.py login` against the mock server, installs the
   credential helper into a sandboxed `$HOME`, and exercises
   `git credential fill`. Covers URL matching, `github.com`
@@ -43,17 +43,17 @@ bash tests/test_doctor.sh
   logout URL surfaced, authorise URL carries `prompt=login` +
   `login_hint`).
 
-- **`test_setup_args.sh`** — `scripts/setup.sh` coverage: argument
+- **`test_setup_args.sh`**: `scripts/setup.sh` coverage: argument
   parsing, `--help`, `--headless` wiring to `forge_login.sh
   --no-browser`, the `--headless + FORGE_SETUP_YES=1` hang guard,
   live-token reuse, silent-refresh rescue, `prompt_choice` non-tty
   stdout isolation.
 
-- **`test_doctor.sh`** — `scripts/doctor.sh`: miss-path under a
+- **`test_doctor.sh`**: `scripts/doctor.sh`: miss-path under a
   sandboxed PATH, asserts every `[MISS]` line is followed by a `fix:`
   line.
 
-- **`mock_oidc_server.py`** — test fixture implementing
+- **`mock_oidc_server.py`**: test fixture implementing
   `/.well-known/openid-configuration`, `/login/oauth/authorize`,
   `/login/oauth/access_token`, `/login/oauth/userinfo`. PKCE
   verification on `authorization_code`; rotation + revocation on