v2.1.4

Fix npu install pkg@latest silently doing nothing due to npm lockfile caching —
npu now removes the stale node_modules copy before re-installing when an explicit
version or tag is specified.

Split outdated discrepancy handling into Sync (install to match package.json) and
Reconcile (update package.json to match installed). Previously Reconcile would
always downgrade package.json to match an older installed version.

Add --cwd / -C global flag to run npu against a different directory without cd-ing.