fix(deps): use bare version for @socketsecurity/lib catalog entry

The npm: alias form on the PRIMARY @socketsecurity/lib entry broke the
registry bootstrap's tarball URL construction (404 on
lib-npm:@socketsecurity/lib@6.0.3.tgz). Only -stable takes the alias;
the primary entry is a bare version, matching socket-registry/socket-cli.

Author: jdalton

pnpm-lock.yaml

@@ -11,7 +11,7 @@ catalog:
   '@sinclair/typebox': 0.34.49
   '@socketregistry/packageurl-js': 1.4.2
   '@socketregistry/packageurl-js-stable': npm:@socketregistry/packageurl-js@1.4.2
-  '@socketsecurity/lib': 'npm:@socketsecurity/lib@6.0.3'
+  '@socketsecurity/lib': 6.0.3
   '@socketsecurity/lib-stable': 'npm:@socketsecurity/lib@6.0.3'
   '@socketsecurity/registry': 2.0.2
   '@socketsecurity/registry-stable': npm:@socketsecurity/registry@2.0.2