refactor(build): remove Socket dependencies from external array

Removed @socketsecurity/sdk, @socketsecurity/lib,
@socketsecurity/packageurl-js, and @socketsecurity/registry from
external array. With platform: 'node', esbuild automatically handles
Node.js built-ins correctly without explicit externalization.

Also added SDK mocking to repository-list-simplified test to prevent
dynamic require errors in isolated test environments.

Author: jdalton

packages/cli/.config/esbuild.cli.build.mjs

@@ -191,10 +191,6 @@ const config = {
   // (but doesn't hurt as extra safety).
   external: [
     'node-gyp', // Required for require.resolve('node-gyp/package.json')
-    '@socketsecurity/registry', // Optional registry package (dev dependency only)
-    '@socketsecurity/lib', // Referenced by socket-packageurl-js dist
-    '@socketsecurity/packageurl-js', // Prevent re-bundling dist files
-    '@socketsecurity/sdk', // Prevent re-bundling dist files
   ],
 
   // Suppress warnings for intentional CommonJS compatibility code.

packages/cli/src/commands/repository/cmd-repository-list-simplified.test.mts

@@ -1,6 +1,14 @@
 /** @fileoverview Tests for repository list command */
 
-import { describe, expect, it } from 'vitest'
+import { beforeEach, describe, expect, it, vi } from 'vitest'
+
+beforeEach(() => {
+  // Mock SDK to avoid dynamic require errors in isolated mode.
+  vi.doMock('@socketsecurity/sdk', () => ({
+    SocketSdk: class MockSocketSdk {},
+    createUserAgentFromPkgJson: vi.fn(),
+  }))
+})
 
 describe('cmd-repository-list', () => {
   it('should have a default export', async () => {