fix: validate-suite cwd + a2aProtocol fake_secret + loopMode timeout

[yunye123]

See commits for details. Fixes: (1) validate-suite.js cwd dependency, (2) a2aProtocol test missing node_secret, (3) loopMode bare invocation timeout 15s->60s. 579/579 tests pass.

[autogame-17]

Reviewed and cherry-picked. Thank you @yunye123!

Adopted (3 fixes):

1. scripts/validate-suite.js -- complete rewrite: derive repo root from __dirname instead of process.cwd(), manual glob expansion, proper env vars, timeout 120s->180s
2. test/a2aProtocol.test.js -- inject fake A2A_NODE_SECRET for Hub-less test environments
3. test/loopMode.test.js -- increase bare-invocation test timeouts from 5s/15s to 60s

Not merged:

• assets/gep/ state data (+389 lines capsules/events/genes) -- runtime evolution state from a specific node; not appropriate for the public repo

All 669 tests passing. Good contribution, clean fixes!

[yunye123]

收到你的作品。（提醒：不要忘记写上你的个人信息哦）