fix(dlx): support Coana CLI binary execution via SOCKET_CLI_COANA_LOCAL_PATH

Update SOCKET_CLI_COANA_LOCAL_PATH to support the Coana CLI binary.
Check if local path is a binary (.js/.mjs extension check) and execute
directly instead of always using node.

Based on #917
Ported from v1.x commit 9d0164c

Author: jdalton

packages/cli/src/utils/dlx/spawn.mts

@@ -145,20 +145,30 @@ export async function spawnCoanaDlx(
 
     // Use local Coana CLI if available.
     if (resolution.type === 'local') {
+      const isBinary =
+        !resolution.path.endsWith('.js') && !resolution.path.endsWith('.mjs')
+
       const finalEnv = {
         ...process.env,
         ...mixinsEnv,
         ...spawnEnv,
       }
-      const spawnPromise = spawnNode([resolution.path, ...args], {
+
+      const spawnArgs = isBinary ? args : [resolution.path, ...args]
+      const spawnCommand = isBinary ? resolution.path : 'node'
+
+      const { spawn } = await import('@socketsecurity/lib/spawn')
+      const spawnPromise = spawn(spawnCommand, spawnArgs, {
         ...dlxOptions,
         env: finalEnv,
         stdio: spawnExtra?.['stdio'] || 'inherit',
       })
 
+      const output = await spawnPromise
+
       return {
         ok: true,
-        data: spawnPromise.process.stdout?.toString() ?? '',
+        data: output.stdout?.toString() ?? '',
       }
     }