chore(sync): cascade no-npx-dlx rule self-disable + bypass legitimate references

Cascade of socket-wheelhouse@12b07fc.

Author: jdalton

.config/oxlint-plugin/rules/no-npx-dlx.mts

@@ -1,3 +1,5 @@
+/* oxlint-disable socket/no-npx-dlx -- product feature name / command wrapping npx; the literal is intentional. */
+
 import { WIN32 } from '@socketsecurity/lib/constants/platform'
 import { spawn } from '@socketsecurity/lib/spawn'
 

.git-hooks/test/_helpers.test.mts

@@ -1,3 +1,5 @@
+/* oxlint-disable socket/no-npx-dlx -- product feature name / command wrapping npx; the literal is intentional. */
+
 /**
  * Socket Firewall (sfw) command.
  *

packages/cli/src/commands/raw-npx/cmd-raw-npx.mts

@@ -1,3 +1,5 @@
+/* oxlint-disable socket/no-npx-dlx -- product feature name / command wrapping npx; the literal is intentional. */
+
 import fs from 'node:fs'
 
 import { getDefaultLogger } from '@socketsecurity/lib/logger'

packages/cli/src/commands/sfw/cmd-sfw.mts

@@ -1,3 +1,5 @@
+/* oxlint-disable socket/no-npx-dlx -- product feature name / command wrapping npx; the literal is intentional. */
+
 import { existsSync } from 'node:fs'
 
 import { getDefaultLogger } from '@socketsecurity/lib/logger'

packages/cli/src/commands/wrapper/check-socket-wrapper-setup.mts

@@ -1,3 +1,5 @@
+/* oxlint-disable socket/no-npx-dlx -- product feature name / command wrapping npx; the literal is intentional. */
+
 /**
  * @fileoverview Unit tests for checkSocketWrapperSetup.
  */