fix(build): deduplicate shared deps across external bundles (#110)

* chore: update picomatch to 4.0.4, fix runWithTempDir prefix param

Update picomatch dep from 2.3.1 to 4.0.4 and override from 4.0.3 to
4.0.4. Make runWithTempDir prefix parameter optional with default.

* fix(build): deduplicate shared deps across external bundles

Mark signal-exit, supports-color, debug, which, spdx-correct,
spdx-expression-parse, and p-map as external in npm-pack bundle so
they resolve to existing standalone wrappers at runtime. Mark
supports-color external in debug bundle. Add p-map as standalone
bundle and externalize from pico-pack.

Update supports-color 10.0.0 → 10.2.2. Add p-map 7.0.4 to
devDependencies and pnpm overrides. Enhance force-node-modules
esbuild plugin to handle ESM-only packages.

Net savings: ~88KB across bundles (npm-pack -86KB, debug -6KB,
pico-pack -4KB, p-map +8KB new).

Author: jdalton

package.json

@@ -764,15 +764,16 @@
     "npm-package-arg": "13.0.0",
     "oxfmt": "^0.37.0",
     "oxlint": "1.53.0",
+    "p-map": "7.0.4",
     "pacote": "21.0.1",
-    "picomatch": "2.3.1",
+    "picomatch": "4.0.4",
     "pony-cause": "2.1.11",
     "semver": "7.7.2",
     "signal-exit": "4.1.0",
     "spdx-correct": "3.2.0",
     "spdx-expression-parse": "4.0.0",
     "streaming-iterables": "8.0.1",
-    "supports-color": "10.0.0",
+    "supports-color": "10.2.2",
     "tar-fs": "3.1.2",
     "tar-stream": "3.1.8",
     "taze": "19.9.2",
@@ -821,15 +822,16 @@
       "minizlib": "3.1.0",
       "npm-package-arg": "12.0.2",
       "npm-pick-manifest": "10.0.0",
-      "picomatch": "4.0.3",
+      "p-map": "7.0.4",
+      "picomatch": "4.0.4",
       "proc-log": "6.1.0",
       "semver": "7.7.2",
       "signal-exit": "4.1.0",
       "spdx-expression-parse": "4.0.0",
       "ssri": "12.0.0",
       "string-width": "8.1.0",
       "strip-ansi": "7.1.2",
-      "supports-color": "10.0.0",
+      "supports-color": "10.2.2",
       "tar": "7.5.11",
       "which": "5.0.0",
       "wrap-ansi": "9.0.2",