fix: use workspace protocol for scanner dependency

Replace `file:../scanner` with `workspace:*` so pnpm resolves
to the npm version on publish. Fixes ERR_MODULE_NOT_FOUND when
installing @ottersight/cli globally via npx.

Bump both packages to 0.1.3.

Author: pikespeak

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ottersight/cli",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "type": "module",
   "description": "ottersight - local SCA scanner CLI",
   "license": "MIT",
@@ -18,7 +18,7 @@
     "node": ">=20"
   },
   "dependencies": {
-    "@ottersight/scanner": "file:../scanner",
+    "@ottersight/scanner": "workspace:*",
     "chalk": "^5.6.2",
     "cli-table3": "^0.6.5",
     "commander": "^14.0.3",

packages/scanner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ottersight/scanner",
-  "version": "0.1.0",
+  "version": "0.1.3",
   "type": "module",
   "description": "OtterSight scanner core - SBOM + CVE + EUVD + KEV enrichment",
   "license": "MIT",