Fix CLI typecheck failures and missing devDependencies - #1200

Problem & Context

Running TypeScript typechecking on the CLI package (bun x tsc --noEmit -p cli or workspace tsc --build) failed with 10 compilation errors across 10 files:

1. TS2307: Cannot find module 'tar' or its corresponding type declarations in cli/src/__tests__/release/wrapper-safety.test.ts:265. Furthermore, cli/release-core/launcher.js:12 requires tar, and running bun test cli/src/__tests__/release/wrapper-safety.test.ts failed with Cannot find module 'tar' because tar was not declared in cli/package.json devDependencies.
2. 9 files across cli/src/components/... (e.g. grid-layout.test.tsx, message-block.completion.test.tsx, render-ui.test.tsx) failed with TS7016: Could not find a declaration file for module 'react-dom/server' because @types/react-dom was omitted from cli/package.json devDependencies despite react-dom being declared.

Changes Made

• Added "@types/react-dom": "19.2.3" to cli/package.json devDependencies (aligning with root package.json React 19 overrides).
• Added "tar": "^7.0.0" to cli/package.json devDependencies (matching cli/release/package.json).
• Added "@types/tar": "^6.1.13" to cli/package.json devDependencies to provide type declarations for tar.
• Updated bun.lock accordingly.

Architecture & Conventions Conformance

• Adheres to Dependency Injection (contracts defined in common/src/types/contracts/, no module monkey patching)
• Terminal commands use terminalCommandBroker (no direct spawn or TUI-process bypass)
• Environment hygiene respected (getCliEnv() for CLI, getSdkEnv() for SDK, no forbidden getProcessEnv() imports)
• Freebuff mode compatibility (IS_FREEBUFF preserved, no paid features introduced)
• Imports ordered and explicit (import type used for types)

Scope Verification

• All modified files are within allowed public directories: cli/package.json, bun.lock
• NO modifications to web/, freebuff/web/, packages/internal/, packages/billing/, packages/bigquery/, or packages/build-tools/

Testing & Verification

• bun x tsc --noEmit -p cli passed with 0 errors (was 10 errors).
• bun test cli/src/__tests__/release/wrapper-safety.test.ts passed 17/17 tests (was 3 failures).
• bun run build:sdk passed cleanly.
• bun run build:freebuff passed cleanly.
• bun cli/scripts/smoke-binary.ts cli/bin/freebuff passed cleanly.
• Anti-flake principles observed.