refactor(cli): replace semver usage with verkit

[liangmiQwQ]

This PR replaces direct semver usage in the CLI and repository tools with verkit (made by @ sxzz). Named ESM imports let the CLI build tree-shake unused version APIs. Building Vite+ with pnpm -F vite-plus build-ts before and after this change reduces the combined size of packages/cli/dist/*.js by 26,079 B (from 1,303,781 B to 1,277,702 B, uncompressed).

Built-in TypeScript declarations remove the direct @types/semver dependency. Range handling now uses rangeToComparators instead of reading Range internals, and coerced versions use plain records, making the call sites easier to maintain. Existing prerelease options are preserved; the core package retains semver for bundled upstream consumers.

🤖 Generated with Codex

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​verkit@​0.5.0

View full report

[liangmiQwQ]

cc @sxzz