fix(cli): harden standalone native runtime

[nkavian]

Summary

• bundle runtime imports that previously escaped native single-executable builds
• verify standalone bundles from a data URL and reject unresolved runtime imports
• package JSON Schema resolution support explicitly for native applications
• require the pinned Argon2 source for Linux package builds
• update the ODP directory client to 0.2.2 and accept empty suggestion results

Verification

• pnpm install --frozen-lockfile
• pnpm typecheck
• pnpm lint
• pnpm test
• pnpm typedoc
• pnpm test:standalone-runtime
• AMD64 Linux package build with pinned Argon2 source
• macOS native application inflow mcp doctor
• Windows native application command matrix
• git diff --check

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!