Refactors CLI to be a pure executable

Streamlines the CLI package by removing its role as a re-exporter for core functionalities. Ensures explicit imports of core modules from `@envguard/core`, making the CLI package a dedicated executable rather than an importable library. Integrates `@napi-rs/keyring` directly into the CLI for robust system keychain interactions. Updates build validation to reflect the CLI's primary executable entry point.

Author: amannirala13

packages/cli/__tests__/core/system-keychain.test.ts

@@ -1,5 +1,5 @@
 import { afterAll, beforeAll, describe, expect, it } from 'vitest';
-import { SystemKeychain } from '../../src';
+import { SystemKeychain } from '@envguard/core';
 
 // Check if we're in a CI environment without keychain support
 const isCI = process.env.CI === 'true';

packages/cli/package.json

@@ -30,8 +30,6 @@
     "url": "https://github.com/amannirala13"
   },
   "type": "module",
-  "main": "./dist/index.js",
-  "types": "./dist/index.d.ts",
   "bin": {
     "envg": "./dist/cli.js"
   },
@@ -60,12 +58,13 @@
     "clean": "rm -rf dist coverage .turbo",
     "clean:dist": "rm -rf dist",
     "clean:deps": "rm -rf node_modules",
-    "validate:build": "node -e \"require('./dist/index.js')\" || echo 'Build validation complete'",
+    "validate:build": "node ./dist/cli.js --version",
     "prepublishOnly": "pnpm run typecheck && pnpm run build",
     "pack:check": "npm pack --dry-run"
   },
   "dependencies": {
     "@envguard/core": "workspace:*",
+    "@napi-rs/keyring": "1.1.0",
     "chalk": "^5.3.0",
     "commander": "^11.1.0",
     "conf": "^12.0.0",

packages/cli/src/index.ts

@@ -3,7 +3,6 @@ import { defineConfig } from 'tsup';
 export default defineConfig({
   entry: {
     cli: 'src/cli.ts',
-    index: 'src/index.ts',
   },
   format: ['esm'], // ES modules for modern Node.js
   outExtension: () => ({ js: '.js' }),
@@ -18,7 +17,7 @@ export default defineConfig({
   bundle: true, // Bundle all dependencies for CLI
   platform: 'node',
   external: [
-    // Don't bundle native dependencies
+    // Don't bundle native dependencies - they must be resolved at runtime
     '@napi-rs/keyring',
   ],
   noExternal: [