chore(addon): lib 6.0.3 migration + fleet catch-up for generalize-publish

Bring socket-addon current so the generalize-publish branch lands clean:
bump @socketsecurity/lib 6.0.0 → 6.0.3 + migrate stale lib-6 import
subpaths (/spawn → /process/spawn/child, /fs → /fs/safe, /logger →
/logger/default) across scripts + hooks; align oxfmt/oxlint/taze/
native-preview/vitest catalog pins to wheelhouse; soak-exclude
compromise@14.15.1 (published mid-landing). Add the canonical
publish-shared.mts the bespoke generalized publish.mts imports, and drop
the renamed-away validate-esbuild-minify.mts (now validate-rolldown-
minify.mts). `pnpm run check` green.

Author: jdalton