refactor: hoist remaining getDefaultLogger() calls

[jdalton]

Summary

Completes the logger hoisting refactoring started in #229cb0f00 by hoisting getDefaultLogger() calls in 10 additional command and utility files that were initially missed.

Changes

• Modified 10 files with inline getDefaultLogger().method() calls
• Replaced with module-scoped const logger = getDefaultLogger() pattern
• Maintains consistency with the codebase-wide logger hoisting pattern

Files Modified

• packages/cli/src/commands/analytics/cmd-analytics.mts
• packages/cli/src/commands/ci/cmd-ci.mts
• packages/cli/src/commands/config/cmd-config-unset.mts
• packages/cli/src/commands/logout/cmd-logout.mts
• packages/cli/src/commands/manifest/cmd-manifest-setup.mts
• packages/cli/src/commands/manifest/run-cdxgen.mts
• packages/cli/src/commands/npx/cmd-npx.mts
• packages/cli/src/commands/package/fetch-purl-deep-score.mts
• packages/cli/src/commands/scan/cmd-scan-github.mts
• packages/cli/src/commands/scan/stream-scan.mts

Benefits

• Single logger initialization per module
• Better code clarity and consistency
• Slight performance improvement (no repeated function calls)

Test plan

• All security checks passed
• Build verification: pnpm build
• Type checks: pnpm run type
• Lint checks: pnpm run lint