Bun-security-scanner publish

Added

• user-agent — rename the client to socket-bun-security-scanner
• brand — add the repo logomark
• policy — declare the npm dual-use content class with a disclosure
• brand — rebuild the pulse mark from the mascot badge with a breathing halo
• scanner — harden advisory handling and scanner factory with expanded tests
• brand — compose the badge from the official mascot on the socket gradient shield
• brand — logomark — socket shield with glowing bun cutout, static + pulse
• socket security scanner for bun — sdk-authenticated + free modes, rolldown bundle

Fixed

• tools — align Bun runtime metadata
• tooling — expose build and clean json results
• tooling — satisfy workflow and command contracts
• tooling — align scanner dependency and ignore policy
• coverage — declare scanner test partitions
• tooling — follow current fleet helper contracts
• tooling — align bun setup and bootstrap checks
• scanner — retry transient unauthenticated failures
• build — disable rolldown debug regions
• readme — use repository name for logo text
• build — omit dependency docs from published scanner bytes
• build — bundle public declarations and isolate artifact cleanup
• scanner — resolve credential layouts and retain alert notes
• match Socket coverage badge styling
• tooling — use canonical fleet helper paths
• workspace — drop pnpm settings current pnpm rejects
• build — resolve Bun types via bun-types, not @types/bun
• scripts — wrap build/clean entries in shared runner
• scanner — CRLF-safe split + live hole check
• catalog — sync the sdk -stable alias to its base version
• catalog — sync the sdk -stable alias to the held base version
• soak — drop the unpublishable bare stuie exclude
• cover — declare the bun coverage runner instead of forking the script
• scripts — point the llms.txt script at its canonical generator
• cover — run the coverage gate on bun test
• brand — move the animated pulse mark out of brand/ per canonical naming

Internal

• ci — refresh bun runtime pin
• ci — install bun through the shared tool manager
• ci — align scanner workflow gates
• gitignore — keep 3 active patches and 4 fleet assets tracked
• gitignore — keep active pnpm patches tracked
• ci — drop no-phone-home env keys the setup action supplies
• fleet — resync -stable aliases, drop scripts with missing targets