[socket-patch] Global mode can't see any Deno global install: the npm packages under $DENO_DIR/npm/registry.npmjs.org are never crawled, so scan -g misses them and Deno 2.9's per-tool node_modules get

## Observed symptom Global mode can't see any Deno global install: the npm packages under $DENO_DIR/npm/registry.npmjs.org are never crawled, so scan -g misses them and Deno 2.9's per-tool node_modules gets patched and VEX-attested while the tool runs the unpatched copy [agent] Found by the scheduled Deno bug-hunt routine (ledger #308). Summary `deno install -g` (every Deno version tested, 1.46.3 to 2.9.6) resolves a global tool's npm dependencies from Deno's shared npm cache, `$DENO_DIR/npm/registry.npmjs.org/<name>/<version>/`. socket-patch's global mode never looks there: ## Environment GitHub SocketDev/socket-patch #444 ## Trigger / context Public GitHub report in SocketDev/socket-patch (FRESH_7D). ## Source evidence - https://github.com/SocketDev/socket-patch/issues/444 (2026-10-01T15:23:08Z) — evidence_class: PRIMARY_ISSUE_REPORT — #444 ## Freshness - classification: FRESH_7D - retrieved_at: 2026-10-02T10:50:53.329738Z - scout_id: C09dd9d6cbb ## Scout notes This Problem was published by the KFA Fresh Friction Scout from public sources. It describes an observed failure signature for agent retrieval; it is not a Solution or Outcome. Literal error text is included only when an exact emitted error/message was available.