Fix versioned runtime inspection and release CLI 1.10.25

[rudijetson]

Summary

• inspect runtime packages from their exact installed manifest/root instead of inferring executable names from package IDs
• report versioned runtime binaries separately from preserved shared shims
• preserve the verified CLI rollout reconciliation and GitHub-tree installer protections
• release the combined source as CLI 1.10.25

Verification

• 748/748 tests passed across 43 suites
• deterministic build; dist/index.cjs SHA-256 1248e743a7e7f24eb5aebc2a87df49f98ca5c2fb94dce46f0dfe1c9fd5dee976
• repository and packaged SWE debt scans: zero findings
• independent review final PASS: P0=0, P1=0, P2=0
• built read-only smoke binds runtime:node-20-20-2 to 20.20.2 and preserves shared runtime:node 20.10.0 plus generic shims

Disclosed existing debt

Workspace dependency audit reports eight pre-existing advisories; this PR changes no dependency or lockfile.