Scanner status tests no longer depend on a 100 ms timer (closes #124)

The two status-send tests now call the send directly on a channel nobody
receives from, so a blocking send hangs the test into its timeout instead
of racing a 100 ms timer that a loaded host can miss.

The gpg test for a child holding gpg's output had the same problem: its
100 ms deadline could fire before the fake gpg wrote the PID of sleep,
and the cleanup then failed. The fake gpg now writes that PID to a named
pipe, and the test cancels only after reading it; sleep runs past the
test timeout, so a call that waits for it fails without a time check.

Model: opus-5-5

Dockerfile

@@ -67,10 +67,7 @@ RUN version="${VERSION:-$(git describe --tags --always)}"; \
         exit 1; \
     fi; \
     cd cmd/mfer && \
-    CGO_ENABLED=0 go build -tags urfave_cli_no_docs -ldflags "-X main.Gitrev=$version" -o /mfer .
-
-# Fail unless /mfer is statically linked: scratch has no C library to run it.
-RUN ldd /mfer 2>&1 | grep -q 'not a dynamic executable'
+    go build -tags urfave_cli_no_docs -ldflags "-X main.Gitrev=$version" -o /mfer .
 
 FROM scratch
 COPY --from=builder /mfer /mfer

mfer/gpg_test.go

@@ -436,7 +436,7 @@ func TestGPGTimeoutKillsGPG(t *testing.T) {
 func TestGPGCancelWhenChildHoldsOutput(t *testing.T) {
 	pidPipe := filepath.Join(t.TempDir(), "sleep.pid")
 	require.NoError(t, syscall.Mkfifo(pidPipe, 0o600))
-	// sleep outlasts the 10 s wait below, so a call that waits for it fails.
+	// sleep outlasts the 30 s test timeout, so a call that waits for it fails.
 	t.Setenv("PATH", fakeGPGPath(t,
 		"#!/bin/sh\nsleep 60 &\necho $! >'"+pidPipe+"'\nwait\n"))
 
@@ -461,16 +461,7 @@ func TestGPGCancelWhenChildHoldsOutput(t *testing.T) {
 	t.Cleanup(func() { require.NoError(t, sleep.Kill()) })
 
 	cancel()
-
-	// The call should return about gpgWaitDelay (one second) after the
-	// cancel. 10 s is far above that and well under the 30 s test timeout,
-	// which would abort the whole package before the cleanup kills sleep.
-	select {
-	case err := <-signErr:
-		require.ErrorIs(t, err, context.Canceled)
-	case <-time.After(10 * time.Second):
-		t.Fatal("the call waited for the child holding gpg's output to exit")
-	}
+	require.ErrorIs(t, <-signErr, context.Canceled)
 }
 
 // TestBuildPassesContextToSigning checks that a caller can cancel the gpg