v1.4.1

Improve Socket.dev Supply Chain Security Score

• Remove @scarf/scarf dependency and scarfSettings (eliminates obfuscated code + telemetry HIGH alerts)
• Escape eval regex pattern in patterns.ts to avoid "uses eval" false positive
• Exclude build/__tests__/ from published npm tarball
• Bump version to 1.4.1