fix(js): allow clean consumer installs

[konard]

Summary

• remove the obsolete published patch-package lifecycle and patch payload
• require command-stream@^0.17.2, which contains the renderer fixes formerly carried by the patch
• add a package-contract regression test and patch changeset

Reproduction

Installing agent-commander@0.10.0 as a dependency in a clean consumer project runs its published postinstall. The lifecycle executes from node_modules/agent-commander, cannot find the hoisted command-stream package there, and aborts the install with:

Error: Patch file found for package command-stream which is not present at node_modules/command-stream

This was reproduced by formal-ai Desktop Release run 30228722022 while consuming the package in link-assistant/formal-ai#851.

Verification

• npm ci
• npm test — 240 passed
• bun test — 240 passed
• deno test --allow-read --allow-run --allow-env --allow-net test/ — 234 passed, 6 runtime-specific ignores
• npm run check
• packed js/ and installed the tarball in an empty npm project; install succeeded with command-stream@0.17.2 and no patch payload

Closes #48

Downstream: link-assistant/formal-ai#851