916de90dbf
The npm registry normalizes bin paths in packument metadata
("dist/cli.js") while the published tarball keeps the authored
"./dist/cli.js". npm consumers get perpetual one-line
package-lock.json flips depending on whether resolution used
registry metadata or the extracted package.
Drop the "./" prefix to match the registry-normalized form and the
sibling coding-agent package.
Fixes #6811