chore(deps): bump @socketsecurity/lib to 5.21.0

Bump the catalog entry from 5.20.1 to 5.21.0 and migrate the two
callers affected by 5.21.0's `/validation` subpath retirement:

- scripts/xport.mts — `validateSchema` now imported from
  `@socketsecurity/lib/schema/validate` (was
  `@socketsecurity/lib/validation/validate-schema`)
- scripts/xport-schema.mts — fileoverview comment updated to match
- .claude/hooks/setup-security-tools/index.mts — `parseSchema`
  now imported from `@socketsecurity/lib/schema/parse` (was
  `@socketsecurity/lib/validation/validate-schema`)

No behavioral change — `validateSchema` / `parseSchema` signatures
are unchanged; only the import path moved. All 2184 tests pass.

Author: jdalton

.claude/hooks/setup-security-tools/index.mts

@@ -27,7 +27,7 @@ import { getDefaultLogger } from '@socketsecurity/lib/logger'
 import { normalizePath } from '@socketsecurity/lib/paths/normalize'
 import { getSocketHomePath } from '@socketsecurity/lib/paths/socket'
 import { spawn } from '@socketsecurity/lib/spawn'
-import { parseSchema } from '@socketsecurity/lib/validation/validate-schema'
+import { parseSchema } from '@socketsecurity/lib/schema/parse'
 
 const logger = getDefaultLogger()
 

pnpm-lock.yaml

@@ -28,7 +28,7 @@ catalog:
   '@npmcli/promise-spawn': 8.0.3
   '@sinclair/typebox': 0.34.49
   '@socketregistry/packageurl-js': 1.4.2
-  '@socketsecurity/lib': 5.20.1
+  '@socketsecurity/lib': 5.21.0
   '@types/fs-extra': 11.0.4
   '@types/node': 24.9.2
   '@types/normalize-package-data': 2.4.4

pnpm-workspace.yaml

@@ -7,7 +7,7 @@
  *     TypeBox schema, emitted by scripts/xport-emit-schema.mts
  *   - Runtime validation at harness startup via
  *     `validateSchema(XportManifestSchema, ...)` from
- *     `@socketsecurity/lib/validation/validate-schema`
+ *     `@socketsecurity/lib/schema/validate`
  *
  * Byte-identical across socket-tui / socket-btm / socket-sdxgen / ultrathink /
  * socket-registry / socket-repo-template via sync-scaffolding.mjs.

scripts/xport-schema.mts

@@ -42,7 +42,7 @@ import { fileURLToPath } from 'node:url'
 
 import { getDefaultLogger } from '@socketsecurity/lib/logger'
 import { spawnSync } from '@socketsecurity/lib/spawn'
-import { validateSchema } from '@socketsecurity/lib/validation/validate-schema'
+import { validateSchema } from '@socketsecurity/lib/schema/validate'
 
 import {
   XportManifestSchema,