test(soma): pin year-grid + file-upload in attr-dedup guard

Batch 3 migrated both but the guard ceilings missed them, leaving the two
unprotected from drift. Pin their legit residuals (year-grid 2, file-upload
3). With this every migrated provider is guarded; the only component with
unpinned attr duplication is `words` (excluded from the rollout per request).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/uix/soma/soma-attr-audit.test.ts

@@ -65,6 +65,8 @@ const MIGRATED_CEILINGS: Record<string, number> = {
 	'grid-list': 4, // per-row aria-selected + selection-checkbox computed label
 	'tree-grid': 3, // computed aria-label + per-row aria-selected + trigger label
 	table: 8, // per-cell/row aria-rowindex/colindex/sort/selected (dynamic)
+	'file-upload': 3, // hidden-input aria-hidden + computed remove/progress labels
+	'year-grid': 2, // computed aria-label + aria-labelledby
 	editable: 4, // computed trigger aria-labels
 	combobox: 0,
 	command: 4, // aria-activedescendant/controls (dynamic) + computed labels