fix(tests): prevent v8 coverage segfault on large codebase

Fixes segmentation fault when running `pnpm cover` by adding memory
management and processing concurrency options.

Changes:
- Hoist logger to module scope in cover.mjs to fix ReferenceError
- Use NODE_OPTIONS with --max-old-space-size=8192 for vitest coverage
- Add processingConcurrency: 1 to vitest config to prevent v8 crashes
- Add reportOnFailure: true and explicit reportsDirectory

The segfault occurred because v8 coverage was processing too much data
at once without sufficient memory. These changes allow the coverage
command to complete successfully with 2,255 tests and 196 test files.

Test Results:
- 196 test files passed
- 2,255 tests passed, 2 skipped
- Type Coverage: 98.16%
- Code Coverage: 37.17%
- Cumulative: 67.66%

Author: jdalton

packages/cli/package.json

@@ -56,7 +56,7 @@
     "test:prepare": "dotenvx -q run -f .env.test -- pnpm build && del-cli 'test/**/node_modules'",
     "test:unit": "dotenvx -q run -f .env.test -- vitest run",
     "test:unit:update": "dotenvx -q run -f .env.test -- vitest run --update",
-    "test:unit:coverage": "dotenvx -q run -f .env.test -- vitest run --coverage",
+    "test:unit:coverage": "NODE_OPTIONS='--max-old-space-size=8192' dotenvx -q run -f .env.test -- vitest run --coverage",
     "test:validate": "node --import=./scripts/load.mjs scripts/validate-tests.mjs",
     "test:wrapper": "node --import=./scripts/load.mjs scripts/test-wrapper.mjs",
     "test-ci": "run-s test:*",

packages/cli/scripts/cover.mjs

@@ -20,11 +20,12 @@ import { WIN32 } from '@socketsecurity/lib/constants/platform'
 import { getDefaultLogger } from '@socketsecurity/lib/logger'
 import { spawn } from '@socketsecurity/lib/spawn'
 
+const logger = getDefaultLogger()
+
 /**
  * Print a header message.
  */
 function printHeader(message) {
-  const logger = getDefaultLogger()
   logger.error(
     '\n═══════════════════════════════════════════════════════',
   )

packages/cli/vitest.config.mts

@@ -89,6 +89,11 @@ export default defineConfig({
     coverage: {
       provider: 'v8',
       reporter: ['text', 'json', 'html', 'lcov', 'clover'],
+      // Prevent v8 coverage segfaults by processing in smaller chunks.
+      processingConcurrency: 1,
+      // Use less memory-intensive options.
+      reportOnFailure: true,
+      reportsDirectory: './coverage',
       exclude: [
         '**/*.config.*',
         '**/node_modules/**',