PASS 22: local package build, isolated install, installed API and CLI
Dependencies reused from frozen bundle; no remote package publication.
