test(create): add two more org snap-tests from the RFC Testing Strategy

- `create-org-monorepo-direct-in-monorepo` — fixture is a minimal pnpm
  workspace with a manifest that has a single `monorepo: true` entry.
  `vp create @your-org/monorepo` directly targets that entry; verifies
  vp refuses with the same "Cannot create a monorepo inside an existing
  monorepo" message the built-in `vite:monorepo` flow produces.

- `create-org-bundled-escape-check` — manifest entry has
  `template: "../outside"`. Verifies the schema-validation layer
  rejects the path before any tarball fetch happens. Error message
  names the offending field path.

Snap-test coverage is now 6 of the 12 fixtures prescribed in the RFC
Testing Strategy table. The remaining 6 are either (a) interactive
picker tests needing PTY simulation — already covered by
`org-picker.spec.ts` unit tests — or (b) tests that exercise the
downstream-runner path (pnpm dlx a package the mock doesn't serve),
which would require either further mock-registry work or
`ignoreOutput: true` that thins the assertion.

Author: fengmk2

packages/cli/snap-tests/create-org-bundled-escape-check/mock-manifest.json

@@ -0,0 +1,24 @@
+{
+  "@your-org/create": {
+    "name": "@your-org/create",
+    "dist-tags": { "latest": "1.0.0" },
+    "versions": {
+      "1.0.0": {
+        "version": "1.0.0",
+        "dist": {
+          "tarball": "{REGISTRY}/@your-org/create/-/create-1.0.0.tgz",
+          "integrity": "sha512-fake"
+        },
+        "vp": {
+          "templates": [
+            {
+              "name": "escape",
+              "description": "Relative path that escapes the package root",
+              "template": "../outside"
+            }
+          ]
+        }
+      }
+    }
+  }
+}

packages/cli/snap-tests/create-org-bundled-escape-check/snap.txt

@@ -0,0 +1,5 @@
+[1]> node $SNAP_CASES_DIR/.shared/mock-npm-registry.mjs -- vp create @your-org --no-interactive # `../outside` path rejected at schema-validation, before any tarball fetch
+
+@your-org/create: vp.templates[0].template escapes the package root: ../outside
+Failed to resolve org template manifest
+

packages/cli/snap-tests/create-org-bundled-escape-check/steps.json

@@ -0,0 +1,5 @@
+{
+  "commands": [
+    "node $SNAP_CASES_DIR/.shared/mock-npm-registry.mjs -- vp create @your-org --no-interactive # `../outside` path rejected at schema-validation, before any tarball fetch"
+  ]
+}

packages/cli/snap-tests/create-org-monorepo-direct-in-monorepo/mock-manifest.json

@@ -0,0 +1,25 @@
+{
+  "@your-org/create": {
+    "name": "@your-org/create",
+    "dist-tags": { "latest": "1.0.0" },
+    "versions": {
+      "1.0.0": {
+        "version": "1.0.0",
+        "dist": {
+          "tarball": "{REGISTRY}/@your-org/create/-/create-1.0.0.tgz",
+          "integrity": "sha512-fake"
+        },
+        "vp": {
+          "templates": [
+            {
+              "name": "monorepo",
+              "description": "Monorepo scaffold",
+              "template": "@your-org/template-monorepo",
+              "monorepo": true
+            }
+          ]
+        }
+      }
+    }
+  }
+}

packages/cli/snap-tests/create-org-monorepo-direct-in-monorepo/package.json

@@ -0,0 +1,5 @@
+{
+  "name": "monorepo-direct-fixture",
+  "private": true,
+  "packageManager": "pnpm@10.0.0"
+}

packages/cli/snap-tests/create-org-monorepo-direct-in-monorepo/pnpm-workspace.yaml

@@ -0,0 +1,2 @@
+packages:
+  - packages/*

packages/cli/snap-tests/create-org-monorepo-direct-in-monorepo/snap.txt

@@ -0,0 +1,6 @@
+[1]> node $SNAP_CASES_DIR/.shared/mock-npm-registry.mjs -- vp create @your-org/monorepo --no-interactive # direct-selecting a monorepo entry inside a monorepo -> refuse
+
+You are already in a monorepo workspace.
+Use a different template or run this command outside the monorepo
+Cannot create a monorepo inside an existing monorepo
+

packages/cli/snap-tests/create-org-monorepo-direct-in-monorepo/steps.json

@@ -0,0 +1,5 @@
+{
+  "commands": [
+    "node $SNAP_CASES_DIR/.shared/mock-npm-registry.mjs -- vp create @your-org/monorepo --no-interactive # direct-selecting a monorepo entry inside a monorepo -> refuse"
+  ]
+}