fix(iocraft+test): bundled-node_modules fallback + drop dist/cli.js → dist/index.js

### iocraft loader: bundled-node_modules fallback (3 + 5 + 4 = 12 tests)

The `@socketaddon/iocraft` package's `index.mjs` already had two
fallback paths for finding the platform-specific `.node` binary:
- direct check at `<build-out>/socketaddon-iocraft-<platformId>/iocraft.node`
- pnpm-virtual-store reconstruction back to the same sibling layout

Both assume a sibling-package layout (`socketaddon-iocraft-darwin-arm64`
next to `socketaddon-iocraft`). On this branch, package-builder
emits the binary as a *bundled* dep instead, at:
  `<build-out>/socketaddon-iocraft/node_modules/@socketaddon/iocraft-darwin-arm64/iocraft.node`

That's where pnpm leaves the optionalDependency when it's installed
into the file: package's local node_modules but not lifted into the
consumer's `.pnpm` store (a known pnpm behavior for `file:` deps
that declare optionalDependencies). Add a bundled-path fallback
after the sibling-path check.

Test:
- iocraft-new-features.test.mts: 26/26 (was 23/26)
- iocraft-properties.test.mts: 5 previously-failing tests now pass
- AnalyticsRenderer / AuditLogRenderer / ThreatFeedRenderer:
  4 previously-failing tests now pass

### paths.test.mts: dist/cli.js → dist/index.js (1 test)

`getBinCliPath()` returns `dist/index.js` (renamed from `dist/cli.js`
in the unified-build refactor — see comment at
src/constants/paths.mts:41). Test still asserted the old `cli.js`
form; update to expect `dist/index.js`.

### Result

socket-cli's full test suite: 5248/5248 passing (was 5235/5248).

Author: jdalton

packages/cli/test/unit/constants/paths.test.mts

@@ -142,7 +142,9 @@ describe('paths constants', () => {
 
     it('getBinCliPath returns path to CLI entry point', () => {
       const result = getBinCliPath()
-      expect(result).toContain('cli.js')
+      // The bundle entry is `dist/index.js` (was `dist/cli.js` before
+      // the unified-build rename in src/constants/paths.mts).
+      expect(result).toContain('dist/index.js')
     })
 
     it('getDistPath returns distPath', () => {

packages/package-builder/templates/socketaddon-main/index.mjs

@@ -106,10 +106,30 @@ function loadNativeAddon() {
       }
 
       if (buildOutDir) {
+        // First: look for a sibling-package-style layout
+        // `socketaddon-iocraft-<platformId>/iocraft.node` next to the
+        // main package.
         const siblingPath = join(buildOutDir, `socketaddon-iocraft-${platformId}`, 'iocraft.node')
         if (existsSync(siblingPath)) {
           return require(siblingPath)
         }
+        // Second: look inside the main package's bundled
+        // `node_modules/@socketaddon/iocraft-<platformId>/iocraft.node`.
+        // This is where pnpm leaves the optionalDependency when it's
+        // installed into the file: package's local node_modules but
+        // not lifted into the consumer's .pnpm store (which happens
+        // for `file:` deps that declare optionalDependencies).
+        const bundledPath = join(
+          buildOutDir,
+          'socketaddon-iocraft',
+          'node_modules',
+          '@socketaddon',
+          `iocraft-${platformId}`,
+          'iocraft.node',
+        )
+        if (existsSync(bundledPath)) {
+          return require(bundledPath)
+        }
       }
 
       throw new Error('Not in development build structure')