chore: move root config files to .config/

Cascaded from socket-wheelhouse. Moves the root config files into
.config/ (with leading dot dropped from the names since they're
already collected):

  .oxlintrc.json    → .config/oxlintrc.json
  .oxfmtrc.json     → .config/oxfmtrc.json
  lockstep.json     → .config/lockstep.json (if present)
  lockstep.schema.json → .config/lockstep.schema.json (if present)
  tsconfig.json     → .config/tsconfig.json
  tsconfig.dts.json → .config/tsconfig.dts.json (if present)
  tsconfig.test.json → .config/tsconfig.test.json (if present)

Internal updates:
* .config/tsconfig.json paths re-rooted (../src etc.)
* .config/oxlintrc.json jsPlugins → './oxlint-plugin/index.js'
* tools that auto-discover tsconfig.json now pass -p .config/tsconfig.json
* lint / format / lockstep scripts pass -c / -p flags pointing at
  the new paths
* package.json scripts (format, type, lockstep) updated to reference
  .config/ paths
* CI workflows: lockstep.json refs updated to .config/lockstep.json

Author: jdalton

lockstep.json .config/lockstep.jsonlockstep.json renamed to .config/lockstep.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/oxc-project/oxc/main/npm/oxlint/configuration_schema.json",
   "plugins": ["typescript", "unicorn", "import"],
-  "jsPlugins": ["./.config/oxlint-plugin/index.js"],
+  "jsPlugins": ["./oxlint-plugin/index.js"],
   "categories": {
     "correctness": "error",
     "suspicious": "error"

lockstep.schema.json .config/lockstep.schema.jsonlockstep.schema.json renamed to .config/lockstep.schema.json

@@ -0,0 +1,26 @@
+{
+  "extends": "./tsconfig.base.json",
+  "compilerOptions": {
+    "declarationMap": false,
+    "sourceMap": false
+  },
+  "include": [
+    "../src/**/*.mts",
+    "../src/**/*.d.ts"
+  ],
+  "exclude": [
+    "../src/**/*.test.mts",
+    "../src/**/*.tsx",
+    "../src/commands/analytics/output-analytics.mts",
+    "../src/commands/audit-log/output-audit-log.mts",
+    "../src/commands/threat-feed/output-threat-feed.mts",
+    "../build/**",
+    "../binaries/**",
+    "../dist/**",
+    "../external/**",
+    "../.cache/**",
+    "../.claude/**",
+    "../node_modules/**",
+    "../pkg-binaries/**"
+  ]
+}

.oxfmtrc.json .config/oxfmtrc.json.oxfmtrc.json renamed to .config/oxfmtrc.json

@@ -27,9 +27,9 @@
     "dev:watch": "pnpm run build:watch",
     "check": "node ../../scripts/check.mts",
     "check-ci": "pnpm run check",
-    "lint": "oxlint -c ../../.oxlintrc.json",
+    "lint": "oxlint -c ../../.config/oxlintrc.json",
     "lint-ci": "pnpm run lint",
-    "type": "tsc --noEmit",
+    "type": "tsc -p ../../.config/tsconfig.json --noEmit",
     "type-ci": "pnpm run type",
     "sync-checksums": "node scripts/sync-checksums.mts",
     "cover": "node --import=./scripts/load.mts scripts/cover.mts",

.oxlintrc.json .config/oxlintrc.json.oxlintrc.json renamed to .config/oxlintrc.json

@@ -21,7 +21,7 @@ const logger = getDefaultLogger()
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url))
 const rootDir = path.resolve(__dirname, '..')
-const outPath = path.join(rootDir, 'lockstep.schema.json')
+const outPath = path.join(rootDir, '.config', 'lockstep.schema.json')
 
 // TypeBox schemas carry JSON Schema shape directly, plus a Symbol-keyed
 // [Kind] marker that JSON.stringify drops. Spreading the schema first

.config/tsconfig.json

@@ -942,7 +942,7 @@ function emitHuman(reports: Report[], summaries: AreaSummary[]): number {
 }
 
 function main(): void {
-  const rootManifestPath = path.join(rootDir, 'lockstep.json')
+  const rootManifestPath = path.join(rootDir, '.config', 'lockstep.json')
   const { areas, merged } = loadManifestTree(rootManifestPath)
 
   const rowsWithArea: Array<{ row: Row; area: string }> = []