add --all flag for socket fix and make it incompatible with --id

[jfblaa]

implicitly use --all if no --id but warn that this is deprecated in local mode

---

Note

Adds --all to socket fix (cannot be combined with --id), warns in local mode when neither is provided, and threads the flag through CLI, logic, types, and tests.

• socket fix CLI
  • Add --all flag to process all discovered vulnerabilities in local mode; update help text.
  • Enforce mutual exclusivity between --all and --id with input validation.
  • In local mode, continue discovering when no --id, but log deprecation warning if --all not provided.
• Implementation
  • Thread all through cmd-fix.mts → handle-fix.mts → coana-fix.mts and types.mts.
  • Update discovery logic to use all || !ghsas.length.
• Tests
  • Add integration tests for --all acceptance, incompatibility with --id, and use with --ecosystems.
• Release
  • Bump version to 1.1.43 and update CHANGELOG.md.

^{Written by Cursor Bugbot for commit 5494efb. Configure here.}