dist: Ship siso and cipd CLIs with -help smoke tests

MODULE.bazel

@@ -123,13 +123,27 @@ bazel_dep(name = "rules_go", version = "0.60.0")
 bazel_dep(name = "gazelle", version = "0.48.0")
 
 go_sdk = use_extension("@rules_go//go:extensions.bzl", "go_sdk")
-go_sdk.download(version = "1.24.12")
+go_sdk.download(version = "1.25.7")
 
 go_deps = use_extension("@gazelle//:extensions.bzl", "go_deps")
 go_deps.from_file(go_mod = "//:go.mod")
+
+# Many of siso's transitive Bazel-aware deps (luci, remote-apis, reclient/api,
+# ...) ship hand-written BUILD files that reference @rules_go / @rules_proto
+# via names that aren't visible in our bzlmod context. Force gazelle to
+# regenerate BUILD files for every external Go module and skip proto-rule
+# generation entirely (compile the checked-in .pb.go files via plain
+# go_library).
+go_deps.gazelle_default_attributes(
+    build_file_generation = "clean",
+    directives = ["gazelle:proto disable_global"],
+)
+
 use_repo(
     go_deps,
     "com_github_modelcontextprotocol_go_sdk",
+    "org_chromium_go_build_siso",
+    "org_chromium_go_luci",
     "org_golang_google_grpc",
     "org_golang_google_protobuf",
 )

dist/BUILD.bazel

@@ -24,6 +24,8 @@ pkg_files(
         "//mcpmux:mcpmux",
         "//sandbox:sandbox",
         "//wsb",
+        "@org_chromium_go_build_siso//:siso",
+        "@org_chromium_go_luci//cipd/client/cmd/cipd",
     ],
     attributes = pkg_attributes(mode = "0755"),
     strip_prefix = strip_prefix.files_only(),