feat: expose envsitter match and scan tools

Adds safe matching/scanning endpoints so workflows can validate secrets without reading .env files.

package-lock.json

@@ -7,11 +7,12 @@
     "": {
       "name": "envsitter-guard",
       "version": "0.0.1",
+      "license": "MIT",
       "dependencies": {
-        "envsitter": "*"
+        "@opencode-ai/plugin": "^1.1.14",
+        "envsitter": "^0.0.2"
       },
       "devDependencies": {
-        "@opencode-ai/plugin": "*",
         "@types/node": "*",
         "husky": "^9.1.7",
         "typescript": "*"
@@ -21,7 +22,6 @@
       "version": "1.1.14",
       "resolved": "https://registry.npmjs.org/@opencode-ai/plugin/-/plugin-1.1.14.tgz",
       "integrity": "sha512-tfF4bEjeF7Gm0W0ViQUhzy77AaZfRxQ/kcPa7/Bc/YM9HddzjEqz0wOJ6ePG8UdUYc0dkKSJOJVhapUbAn/tOw==",
-      "dev": true,
       "license": "MIT",
       "dependencies": {
         "@opencode-ai/sdk": "1.1.14",
@@ -32,7 +32,6 @@
       "version": "1.1.14",
       "resolved": "https://registry.npmjs.org/@opencode-ai/sdk/-/sdk-1.1.14.tgz",
       "integrity": "sha512-PJFu2QPxnOk0VZzlPm+IxhD1wSA41PJyCG6gkxAMI767gfAO96A0ukJJN7VK/gO6MbxLF5oTFaxBX5rAGcBRVw==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/@types/node": {
@@ -46,9 +45,9 @@
       }
     },
     "node_modules/envsitter": {
-      "version": "0.0.1",
-      "resolved": "https://registry.npmjs.org/envsitter/-/envsitter-0.0.1.tgz",
-      "integrity": "sha512-gDJ/ZMjD0z31MSpj88IiaHNdJVfzWpXANm4uLwUD1ScKtt3LaKZYir2nY+peJOBjZM9579d5y+rTIQD+kU4lIA==",
+      "version": "0.0.2",
+      "resolved": "https://registry.npmjs.org/envsitter/-/envsitter-0.0.2.tgz",
+      "integrity": "sha512-2rVcSQnRrDqk//2XM5c+M85YkNc6ljFgfMC4gBTvA/U21OUGB53zfANIEZZXfOcSVNmoRHVCGcogFHLHsBjd1w==",
       "license": "MIT",
       "bin": {
         "envsitter": "dist/cli.js"
@@ -95,7 +94,6 @@
       "version": "4.1.8",
       "resolved": "https://registry.npmjs.org/zod/-/zod-4.1.8.tgz",
       "integrity": "sha512-5R1P+WwQqmmMIEACyzSvo4JXHY5WiAFHRMg+zBZKgKS+Q1viRa0C1hmUKtHltoIFKtIdki3pRxkmpP74jnNYHQ==",
-      "dev": true,
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"