fix(deps): restore -stable catalog aliases for self-named fleet packages

Cascade socket-wheelhouse@92cd3e3's fix into socket-cli.

pnpm overrides can't redirect a package's own name from inside the
same package — Node ESM resolves it as a self-reference. The 4
Socket-published packages each need a SECOND name
(`<canonical>-stable`) aliased via `npm:` to the published version
so build/script/hook/config code resolves to the published catalog
version regardless of where the importing file lives.

Updates infra files (scripts/, .config/, .git-hooks/, .claude/hooks/,
packages/cli/scripts/, packages/cli/.config/) to import via `-stable`
names. Adds the 4 `-stable` aliases to pnpm-workspace.yaml catalog
and root + packages/cli devDependencies.

Verified: pnpm install + pnpm --filter @socketsecurity/cli run build pass.

Author: jdalton

.claude/hooks/check-new-deps/package-lock.json

@@ -11,7 +11,7 @@ import { promises as fsp, existsSync, mkdtempSync, rmSync } from 'node:fs'
 import os from 'node:os'
 import path from 'node:path'
 
-import { whichSync } from '@socketsecurity/lib/bin'
+import { whichSync } from '@socketsecurity/lib-stable/bin'
 
 import {
   buildAuditRecords,

.claude/hooks/check-new-deps/test/extract-deps.test.mts

@@ -13,9 +13,9 @@ import { tmpdir } from 'node:os'
 import path from 'node:path'
 import { fileURLToPath } from 'node:url'
 
-import { httpDownload, httpRequest } from '@socketsecurity/lib/http-request'
-import { getDefaultLogger } from '@socketsecurity/lib/logger'
-import { spawn } from '@socketsecurity/lib/spawn'
+import { httpDownload, httpRequest } from '@socketsecurity/lib-stable/http-request'
+import { getDefaultLogger } from '@socketsecurity/lib-stable/logger'
+import { spawn } from '@socketsecurity/lib-stable/spawn'
 
 const logger = getDefaultLogger()
 

.claude/hooks/setup-security-tools/package-lock.json

@@ -10,7 +10,7 @@
     "test": "node --test test/*.test.mts"
   },
   "devDependencies": {
-    "@socketsecurity/lib": "catalog:",
+    "@socketsecurity/lib-stable": "catalog:",
     "@types/node": "24.9.2"
   }
 }

.claude/hooks/setup-security-tools/update.mts

@@ -10,8 +10,8 @@
 import { describe, it } from 'node:test'
 import assert from 'node:assert/strict'
 
-import { whichSync } from '@socketsecurity/lib/bin'
-import { spawnSync } from '@socketsecurity/lib/spawn'
+import { whichSync } from '@socketsecurity/lib-stable/bin'
+import { spawnSync } from '@socketsecurity/lib-stable/spawn'
 
 const hookScript = new URL('../index.mts', import.meta.url).pathname
 const nodeBin = whichSync('node')