fix: move jco dependency back to active (#315)

Since `componentize-js` uses [jco as a dependency](https://github.com/bytecodealliance/ComponentizeJS/blob/main/src/componentize.js#L19), it needs to be an regular dep (not a development-only) one.

See [this comment](#314 (comment)) and [this test failure](https://github.com/bytecodealliance/ComponentizeJS/actions/runs/18786003894/job/53605694255)

Author: vados-cosmonic

package-lock.json

@@ -15,13 +15,13 @@
     "import": "./src/componentize.js"
   },
   "devDependencies": {
-    "@bytecodealliance/jco": "^1.15.1",
     "@bytecodealliance/preview2-shim": "^0.17.4",
     "cross-env": "^7.0.3",
     "semver": "^7.7.2",
     "vitest": "^3.2.4"
   },
   "dependencies": {
+    "@bytecodealliance/jco": "^1.15.1",
     "@bytecodealliance/wizer": "^10.0.0",
     "es-module-lexer": "^1.6.0",
     "oxc-parser": "^0.76.0"