fix: resolve bundled tool binaries without package metadata exports

[artiphishle]

Summary

• stop resolving bundled tools through <package>/package.json
• resolve the package entrypoint first, then walk up to the package root and read package metadata from disk
• fixes packages such as Knip that do not export package.json
• add a patch changeset

Verification

Not run by ChatGPT. Before merge, run:

bun run build
bun run lint:fix
bun run test
bun run knip

After release, downstream repos using ankhorage-knip should update to the new patch version.