chore(deps): bump @socketsecurity/lib catalog to 5.28.0

Brings in compression module, socket-lib CLI, and dlx/package
installRoot option from 5.28.0 (and 5.27.0's primordials/smol
expansion since this catalog jumps two minors).

Author: jdalton

pnpm-lock.yaml

@@ -6,7 +6,7 @@ trustPolicy: no-downgrade
 # entry — the .claude/hooks/check-new-deps hook references it via
 # "catalog:" so its manifest stays in lockstep with the root.
 catalog:
-  '@socketsecurity/lib': 5.26.1
+  '@socketsecurity/lib': 5.28.0
   '@types/node': 24.9.2
 
 # Register .claude/hooks/* as workspace packages so taze (run via