chore: roll out PKGViz test-source exclusion

[artiphishle]

PKGViz #247 fixes false-positive production cyclic-dependency findings by excluding conventional test/spec sources before dependency-graph construction.

Dependency

Blocked until pkgviz@0.8.2 is published to npm. PKGViz release prep is tracked by artiphishle/pkgviz#249 / PR #250.

Scope after publication

• update the centrally pinned PKGViz audit command from pkgviz@0.8.1 to pkgviz@0.8.2
• update the corresponding policy regression test
• add the required Devtools changeset
• validate the generated managed workflow/audit policy
• release Devtools, then let consumers such as Studio sync the managed audit

Required skills

• ankhorage-coding-rules
• load any additional repository-local skill required by AGENTS.md for the touched policy/tests

Do not pin an unpublished PKGViz version.

[artiphishle]

Status update:

• PKGViz chore(deps): update ankhorage/renovate digest to f788ffe #247 is merged in main; production analysis now excludes conventional test/spec sources before dependency-graph construction.
• PKGViz fix: ship TypeScript compiler with isolated Devtools provider #250 is merged; repository version is prepared as 0.8.2.
• Project Detector support is already released as @ankhorage/project-detector@0.3.1.
• Remaining external dependency: publish pkgviz@0.8.2 to npm.
• After publication: update this Devtools policy pin from pkgviz@0.8.1 to pkgviz@0.8.2, release Devtools, then sync Studio/other consumers.

Do not merge a Devtools pin to 0.8.2 before the npm package exists.