refactor(run-cdxgen + mcp/depscore): colocate warnIfEmptyComponents + getSdk

Author: jdalton

packages/cli/src/commands/manifest/run-cdxgen.mts

@@ -226,7 +226,7 @@ export async function runCdxgen(argvObj: ArgvObject): Promise<DlxSpawnResult> {
  * configurations we did not hard-gate (non-default lifecycle, custom
  * `--filter`/`--only` wiping all components, ecosystem mismatch, etc.).
  */
-export async function warnIfEmptyComponents(
+async function warnIfEmptyComponents(
   outputPath: string,
   argvMutable: ArgvObject,
 ): Promise<void> {

packages/cli/src/commands/mcp/depscore.mts

@@ -91,7 +91,7 @@ export function formatScore(jsonData: ArtifactData): string {
 // tool calls; HTTP+OAuth mode constructs one per distinct token.
 const sdkCache = new Map<string, SocketSdk>()
 
-export async function getSdk(apiToken: string): Promise<SocketSdk> {
+async function getSdk(apiToken: string): Promise<SocketSdk> {
   const cached = sdkCache.get(apiToken)
   if (cached) {
     return cached