@bomb.sh/tools and OXC compat for IDEs

[jbolda]

What does this PR do?

IDEs seem to expect these bins at the root. Hoist them and pull in the config through root config files so our IDEs can pick up and match what our bsh commands output.

Type of change

• Bug fix
• Feature
• Refactor (no behavior change)
• Documentation
• Performance improvement
• Tests
• Chore (dependencies, CI, tooling)

Checklist

• All tests pass (pnpm test)
• Files are formatted (pnpm format)
• I have added/updated tests for my changes (if applicable)
• I have added a changeset

AI-generated code disclosure

• This PR includes AI-generated code

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​@​bomb.sh/​tools@​0.6.1

View full report

[jbolda]

Note: first test intentionally failed to confirm upstream changes did indeed pass the exit code properly.

[natemoo-re]

That works! I think making these devDependcies on the tools side would also work but then we'd lose the lockstep upgrades across repos (which might be good? open to pushback here)