fix: declare tinyexec as an explicit devDependency

bump.config.ts imports tinyexec directly (added in the v0.9.5 release script), but it was never listed in the root package.json - only pulled in transitively via bumpp. knip's unlisted-dependencies check has been failing main's CI Lint job since that change; add the explicit catalog:deps entry to fix it.

Author: antfubot

package.json

@@ -59,6 +59,7 @@
     "prompts": "catalog:tooling",
     "simple-git-hooks": "catalog:tooling",
     "skills-npm": "catalog:tooling",
+    "tinyexec": "catalog:deps",
     "tinyglobby": "catalog:deps",
     "tsnapi": "catalog:testing",
     "tsx": "catalog:build",