fix: filter internal vite-plus aliases from published CLI overrides

The workspace pnpm-workspace.yaml overrides include npm: protocol
redirections (vite→@voidzero-dev/vite-plus-core, vitest→@voidzero-dev/
vite-plus-test) that are internal to the workspace's Vite+ migration.
These were being resolved and written into the published CLI package.json
overrides, polluting the published artifact with dev-only aliases.

Filter out any resolved overrides that use npm: protocol aliases, since
those are always workspace-internal package redirections that should
never be published to end users.

Author: cursoragent

apps/server/scripts/cli.ts

@@ -231,6 +231,16 @@ const publishCmd = Command.make(
           const workspaceConfig = yield* readWorkspaceConfig();
           const workspaceCatalog = workspaceConfig.catalog ?? {};
           const workspaceOverrides = workspaceConfig.overrides ?? {};
+          const resolvedOverrides = resolveCatalogDependencies(
+            workspaceOverrides,
+            workspaceCatalog,
+            "apps/server",
+          );
+          // Filter out internal workspace aliases (npm: protocol redirections
+          // like vite→vite-plus) that are irrelevant to published consumers.
+          const publishOverrides = Object.fromEntries(
+            Object.entries(resolvedOverrides).filter(([, v]) => !v.startsWith("npm:")),
+          );
           const pkg: PackageJson = {
             name: serverPackageJson.name,
             repository: serverPackageJson.repository,
@@ -244,11 +254,7 @@ const publishCmd = Command.make(
               workspaceCatalog,
               "apps/server",
             ),
-            overrides: resolveCatalogDependencies(
-              workspaceOverrides,
-              workspaceCatalog,
-              "apps/server",
-            ),
+            overrides: publishOverrides,
           };
 
           const original = yield* fs.readFileString(packageJsonPath);