feat(KB-134): exclude Bun-compiled binaries from npm publish tarball

- Refine files field in cli package.json to use specific globs instead of bare 'dist'
- Include only .js, .d.ts, .d.ts.map, .js.map, and dist/client/** in tarball
- Add tests verifying refined file globs are present
- Add tests ensuring Bun platform binaries are not matched by any glob
- Add changeset for patch release

packages/cli/package.json

@@ -6,7 +6,11 @@
     "kb": "./dist/bin.js"
   },
   "files": [
-    "dist",
+    "dist/**/*.js",
+    "dist/**/*.d.ts",
+    "dist/**/*.d.ts.map",
+    "dist/**/*.js.map",
+    "dist/client/**",
     "README.md"
   ],
   "scripts": {