feat: add #socketsecurity/lib alias for stable npm release

Added Node.js import map alias to reference a stable published npm
release (v3.1.3) instead of local workspace source.

## Changes

**devDependencies**:
- Added `@socketsecurity/lib-stable` from npm registry tarball
- Uses https://registry.npmjs.org/@socketsecurity/lib/-/lib-3.1.3.tgz
- Avoids workspace linking by using direct tarball URL

**package.json imports**:
- Added `#socketsecurity/lib/*` → `@socketsecurity/lib-stable/*`
- Scripts/tests can import from stable release version

**scripts/lint.mjs**:
- Fixed import to use `@socketsecurity/lib/git` (removed deleted local file)
- Changed async functions to sync (getChangedFilesSync, getStagedFilesSync)

## Usage

Scripts and tests can now choose between:
- `#lib/*` - Local source (in-development, from `./src`)
- `#socketsecurity/lib/*` - Stable npm release (v3.1.3)

## Example

```javascript
// Use local in-development version
import { getDefaultLogger } from '#lib/logger'

// Use stable npm release v3.1.3
import { getDefaultLogger } from '#socketsecurity/lib/logger'
```

## Why Tarball URL?

Direct tarball URL prevents pnpm from linking to local workspace,
ensuring the alias references the actual published npm package.

Author: jdalton

package.json

@@ -548,6 +548,7 @@
     "#env/*": "./dist/env/*.js",
     "#lib/*": "./dist/*.js",
     "#packages/*": "./dist/packages/*.js",
+    "#socketsecurity/lib/*": "@socketsecurity/lib-stable/*",
     "#types": "./dist/types.js",
     "#utils/*": "./dist/utils/*.js"
   },
@@ -594,6 +595,7 @@
     "@socketregistry/is-unicode-supported": "1.0.5",
     "@socketregistry/packageurl-js": "1.3.5",
     "@socketregistry/yocto-spinner": "1.0.19",
+    "@socketsecurity/lib-stable": "https://registry.npmjs.org/@socketsecurity/lib/-/lib-3.1.3.tgz",
     "@types/node": "24.9.2",
     "@typescript/native-preview": "7.0.0-dev.20250920.1",
     "@vitest/coverage-v8": "4.0.3",

pnpm-lock.yaml

@@ -6,8 +6,12 @@
 import { existsSync, readFileSync } from 'node:fs'
 import path from 'node:path'
 
+import {
+  getChangedFilesSync,
+  getStagedFilesSync,
+} from '@socketsecurity/lib/git'
+
 import { isQuiet } from './utils/flags.mjs'
-import { getChangedFiles, getStagedFiles } from './utils/git.mjs'
 import { printHeader } from './utils/helpers.mjs'
 import { logger } from './utils/logger.mjs'
 import { parseArgs } from './utils/parse-args.mjs'
@@ -322,20 +326,20 @@ async function getFilesToLint(options) {
 
   if (staged) {
     mode = 'staged'
-    changedFiles = await getStagedFiles({ absolute: false })
+    changedFiles = getStagedFilesSync({ absolute: false })
     if (!changedFiles.length) {
       return { files: null, reason: 'no staged files', mode }
     }
   } else if (changed) {
     mode = 'changed'
-    changedFiles = await getChangedFiles({ absolute: false })
+    changedFiles = getChangedFilesSync({ absolute: false })
     if (!changedFiles.length) {
       return { files: null, reason: 'no changed files', mode }
     }
   } else {
     // Default to changed files if no specific flag
     mode = 'changed'
-    changedFiles = await getChangedFiles({ absolute: false })
+    changedFiles = getChangedFilesSync({ absolute: false })
     if (!changedFiles.length) {
       return { files: null, reason: 'no changed files', mode }
     }