test: preserve trusted Cursor prompt root

Refs #1426.\n\nPreserves the operator-trusted Cursor prompt root during real smoke runs so workspace trust is not lost.\n\nGate: exact-head fresh review clean; Ubuntu, Windows, bun workflow, and Greptile passed on fddfd3724d4fed7a20c8b6f571bff464c6154870.