Adds scripts/audit-wrapper-dep-ranges.mjs as a static CI guard wired
into the existing dep-audit job (alongside #1147/#2018 overlap check).
Catches three regression shapes:
1. ruflo's @claude-flow/cli dep range no longer includes the actual cli
version (the 3.10.0 → 3.10.1 fix path).
2. ruflo carries a pre-release range (-alpha.N / -beta.N) for a dep
that has moved to stable semver — the exact shape that caused the
#2127 crash report.
3. claude-flow umbrella's sibling deps (@claude-flow/cli-core / mcp /
neural / shared) fall out of sync with the workspace package.json
versions.
Verified positive (passes on current main) + negative (catches the
pre-fix state) — see commit message of 792044633 for the underlying
bug story.
Co-Authored-By: RuFlo <ruflo-bot@users.noreply.github.com>
ruv