refactor(build): auto-detect external dependencies from package.json

Change esbuild configuration to dynamically read runtime dependencies
from package.json instead of manually listing them.

Changes:
- Read package.json at build time to get dependencies object
- Use Object.keys(dependencies) to populate external array
- Remove hardcoded list of external dependencies

Benefits:
- Automatically keeps external dependencies in sync with package.json
- Prevents mistakes where dependencies are added but not marked external
- Clearer intent: all dependencies are external, devDependencies bundled
- Eliminates manual maintenance of external array

Verification:
- form-data correctly marked as external (not bundled inline)
- Bundle only contains require("form-data") statement
- All bundle validation tests pass

Author: jdalton

.config/esbuild.config.mjs

@@ -22,6 +22,11 @@ const distPath = path.join(rootPath, 'dist')
 
 const logger = getDefaultLogger()
 
+// Read package.json to get runtime dependencies
+const packageJsonPath = path.join(rootPath, 'package.json')
+const packageJson = JSON.parse(await fs.readFile(packageJsonPath, 'utf8'))
+const externalDependencies = Object.keys(packageJson.dependencies || {})
+
 /**
  * Plugin to shorten module paths in bundled output with conflict detection.
  * Uses @babel/parser and magic-string for precise AST-based modifications.
@@ -225,12 +230,8 @@ export const buildConfig = {
   ),
 
   // External dependencies.
-  // @socketsecurity/lib, form-data, and @socketregistry/packageurl-js are external (not bundled) - consumers must install them.
-  external: [
-    '@socketsecurity/lib',
-    '@socketregistry/packageurl-js',
-    'form-data',
-  ],
+  // All runtime dependencies from package.json are external (not bundled) - consumers must install them.
+  external: externalDependencies,
 
   // TypeScript configuration
   tsconfig: path.join(rootPath, 'tsconfig.json'),