fix(build): use non-destructured require for @strapi/utils

Prevents the same runtime crash pattern that hit magic-link:
pack-up's rollup-commonjs rewrites `const { errors } = require('@strapi/utils')`
into `_interopDefault(...).default.errors`. For the dual ESM/CJS
@strapi/utils package, `.default` does not expose `errors`, so the
destructured value resolves to undefined at runtime and any call
through `errors.XxxError` crashes on plugin boot.

Direct property access after a plain require() is not rewritten by
rollup-commonjs:
  const { errors } = require('@strapi/utils')
    -> const errors = require('@strapi/utils').errors

Author: Schero94

server/src/policies/session-required.js

@@ -16,7 +16,11 @@
  */
 
 const SESSION_UID = 'plugin::magic-sessionmanager.session';
-const { errors } = require('@strapi/utils');
+// Avoid destructuring `@strapi/utils` at require time — pack-up's
+// rollup-commonjs plugin rewrites the import in a way that resolves to
+// undefined at runtime for dual ESM/CJS packages. Direct property access
+// after a plain require() sidesteps the rewrite.
+const errors = require('@strapi/utils').errors;
 const { resolveUserDocumentId } = require('../utils/resolve-user');
 const { getPluginSettings } = require('../utils/settings-loader');
 const { extractBearerToken } = require('../utils/extract-token');