refactor(preflight): remove unused cli-ai from preflight downloads

cli-ai is not currently used, so remove it from background preflight
downloads. Final download order: coana → cdxgen → Python → socketsecurity.

Also consolidates .gitignore workspace entries into root .gitignore
to reduce duplication across package-level ignores.

Author: jdalton

.gitignore

@@ -59,3 +59,15 @@ packages/*/.yoga-tests
 packages/*/.onnx-source
 packages/*/.minilm-source
 **/html
+
+# Workspace ignores
+packages/cli/CHANGELOG.md
+packages/cli/LICENSE
+packages/cli/*.png
+packages/cli-with-sentry/data/
+packages/cli-with-sentry/CHANGELOG.md
+packages/cli-with-sentry/LICENSE
+packages/cli-with-sentry/*.png
+packages/socket/CHANGELOG.md
+packages/socket/LICENSE
+packages/socket/*.png

packages/cli-with-sentry/.gitignore

@@ -1,6 +1,2 @@
 /coverage
-/data
 **/dist
-CHANGELOG.md
-LICENSE
-*.png

packages/cli/.gitignore

@@ -1,5 +1,2 @@
 /coverage
 **/dist
-CHANGELOG.md
-LICENSE
-*.png

packages/cli/src/utils/preflight/downloads.mts

@@ -4,8 +4,7 @@
  * Silently downloads dependencies in the background on first CLI run:
  * 1. @coana-tech/cli
  * 2. @cyclonedx/cdxgen
- * 3. @socketbin/cli-ai
- * 4. Python + socketsecurity (socket-python-cli)
+ * 3. Python + socketsecurity (socket-python-cli)
  *
  * Downloads are staggered sequentially to avoid resource contention.
  * This runs asynchronously and never blocks the main CLI execution.
@@ -50,7 +49,7 @@ export function runPreflightDownloads(): void {
   void (async () => {
     try {
       // Stagger downloads sequentially to avoid resource contention.
-      // Order: coana → cdxgen → cli-ai → Python → socketsecurity.
+      // Order: coana → cdxgen → Python → socketsecurity.
 
       // 1. @coana-tech/cli preflight.
       const coanaVersion = ENV.INLINED_SOCKET_CLI_COANA_VERSION
@@ -74,18 +73,7 @@ export function runPreflightDownloads(): void {
         })
       }
 
-      // 3. @socketbin/cli-ai preflight.
-      const cliAiVersion = ENV.INLINED_SOCKET_CLI_AI_VERSION
-      const cliAiSpec = `@socketbin/cli-ai@^${cliAiVersion}`
-      if (!isPackageCached(cliAiSpec)) {
-        await downloadPackage({
-          package: cliAiSpec,
-          binaryName: 'cli-ai',
-          force: false,
-        })
-      }
-
-      // 4. Python + socketsecurity (socket-python-cli) preflight.
+      // 3. Python + socketsecurity (socket-python-cli) preflight.
       const pythonBin = await ensurePython()
       await ensureSocketCli(pythonBin)
     } catch {}

packages/socket/.gitignore

@@ -1,5 +1,2 @@
 /coverage
 **/dist
-CHANGELOG.md
-LICENSE
-*.png