Fix release artifact installability

[chubes4]

Summary

• keep development patching while making production package lifecycle safe without patch-package
• synchronize root and workspace lockfile versions to 0.13.0
• materialize workspace packages before creating CLI TAR and plugin ZIP artifacts
• probe bundled Node before selecting it so cross-platform consumers fall back to host Node
• install and execute extracted artifacts in release coverage tests

Fixes #1956.

Verification

• npm run test:release-package-coverage
• node scripts/apply-development-patches.mjs
• npm run build
• npm run smoke -- --group package
• git diff --check

The package smoke passed. Its Docker-only disposable MySQL mysqli E2E skipped because Docker is unavailable locally.