[boburning]

Summary

• route a pull-request change confined to src/bloomShell/main.c through cppcheck's owning translation unit instead of the entire src/bloomShell directory
• retain the complete Bloom Shell target for ARM compilation
• retain affected Bloom Shell and frontend native and AddressSanitizer tests
• retain the five focused Shell integration files and all exhaustive merge-group/manual behavior
• extend CI-scope regression coverage for entrypoint-only and mixed Bloom Settings/entrypoint changes

This is a focused continuation of the affected-component CI work in #571 and #573.

Measured cause and result

PR #584 changed four lines in src/bloomShell/main.c, but its static-analysis resolver selected the entire Bloom Shell directory. Hosted cppcheck then spent 190 seconds in the analysis step and 3m24s in the job overall: https://github.com/boburning/BloomOS/actions/runs/33327223569

With this branch's exact PR-only resolver output, reduced cppcheck 2.19 analyzes src/bloomShell/main.c in 12.25 seconds locally. The equivalent #573 owning-file policy produced a 14-second hosted static-analysis job, so this removes the same avoidable directory expansion without changing compile or integration coverage.

For the exact #584-shaped path set (main.c plus its Shell regression test), the resolver now returns:

• risk: 2
• ARM build: bloomShell
• cppcheck: src/bloomShell/main.c
• native and ASan: BloomShell*:BloomFrontend*
• Shell: runtime, Safe Mode, Settings, typography, and GameSwitcher control suites
• visual gallery: none

Validation

• sh -n tools/ci-scope.sh: pass
• complete test/test_ci_scope.sh: pass
• local reduced cppcheck 2.19 on the resolved owner: pass in 12.25 seconds
• exact fix(shell): keep Wi-Fi polling inside SDL 1.2 event range #584-shaped resolver matrix: pass
• git diff --check: pass

Safety and limitations

• base: current main after merged fix(device): recover wedged Shell restarts safely #585
• pull-request feedback only; merge-group and manual/non-PR static analysis remain full-source
• cppcheck remains additive to complete compilation and linked tests; no compiler, warning, sanitizer, ARM, Shell, timeout, or release gate is removed
• policy-only host change; no device deployment, network action, update, reboot, input injection, or physical certification
• the online Mini Plus remains untouched on its signed fix(shell): keep Wi-Fi polling inside SDL 1.2 event range #584 Shell overlay

Related: #518, #520, #571, #573, #584.