test: spec tests for relaxed default permission profile
Default DENO_UNSTABLE_RELAXED_PERMISSIONS=0 in the shared test command
builder so the existing corpus keeps asserting today's deny-by-default
behavior, and add relaxed_default spec tests that opt back in to cover:
read anywhere, write under cwd/temp, env, denied writes outside, gated
net, explicit-flag opt-out, --deny-write compose, -A, gate-off control,
worker inheritance, and chdir not widening the grant.