fix: resolve catalog workspace deps in foreach

[StantonMatt]

What changed

• Resolves workspaces foreach dependency graph checks through the normal dependency-reduction hooks before testing whether a dependency points at a workspace.
• Applies that to recursive workspace selection and topological wait points, so named catalog entries that resolve to workspace:* are treated as workspace edges.
• Adds acceptance coverage for catalog:local resolving to workspace:* with --recursive --topological-dev --from ... --exclude ....

Fixes #7129.

Verification

TEST_BINARY=$PWD/scripts/run-yarn.js node scripts/run-yarn.js jest --runTestsByPath packages/acceptance-tests/pkg-tests-specs/sources/commands/workspaces/foreach.test.js --runInBand
node scripts/run-yarn.js eslint --max-warnings 0 packages/plugin-workspace-tools/sources/commands/foreach.ts packages/acceptance-tests/pkg-tests-specs/sources/commands/workspaces/foreach.test.js
node scripts/run-yarn.js typecheck:all
node scripts/run-yarn.js test:lint
node scripts/run-yarn.js version check
git diff --check