chore(deps): take @socketregistry/packageurl-js 1.5.2

Published today, so the three pins move together: the catalog entry, the
-stable alias, and the dated soak exclude (removable 2026-08-12). Full fast
lane green after the lockfile reconcile: 68 files, 962 tests.

chore: apply release readiness fixes

chore: bump version to 4.1.2

chore: bump version to 4.1.1

chore: bump version to 4.1.0

chore: bump version to 4.0.4

test(repo): adapt DNS-guidance and sendApi tests to the fail-closed n…

…ock setup

chore(repo): grow package-exports config into the full generation policy

chore(release): bump to v4.0.1 (#582)