[Epic] Component deploy: package-manager & dependency install correctness

Tracking epic for component-deploy package-manager/dependency-install correctness: package-lock.json handling, alternate package managers (yarn/pnpm), npm-install branching by reference type, and handling changed package.json dependencies across re-deploys.

---
_Filed by Claude (Opus 4.8), issue-backlog triage & grouping pass._

This is an epic covering package-lock.json handling, alternate package managers, npm-install branching by reference type, and dependency changes across component re-deploys; no files, tests, or entry points are named. Start by locating the component-deploy package-manager and dependency-install code, then identify existing deployment tests and define expected behavior for each listed case.

Written by the indexing model from the issue text.