Add the ratchet that keeps Cesium inside the renderer

Outside src/render/cesium/, only the 236 files on cesiumAllowList.json
may reach Cesium, and each must still do so, so porting a file removes
its entry. A file reaches Cesium by importing it or the Cesium adapter,
by name or by path, or by being handed the namespace as a parameter,
binding or property. Files added to the list since origin/main fail the
check, once the list is on main. The renderer contract, stub and
conformance suite must stay Cesium-free, and runtime code in a language
the check cannot read fails it.

scripts/format-scope.json

@@ -672,6 +672,8 @@
   "src/services/requests.js",
   "src/app/scene.js",
   "src/app/renderer.test.mjs",
+  "src/render/noCesiumOutsideRender.test.mjs",
+  "src/render/cesiumAllowList.json",
   "src/geo/geo.test.mjs",
   "src/geo/celestial.test.mjs",
   "src/geo/quaternion.test.mjs",