fix(release): follow the workspace protocol in the invariant fixture and knip config

The package-invariant spec built its fixture with the range the rule no longer
accepts. knip stopped needing the tar ignore entry once the tarball helpers
became the one place that spawns it.

knip.json

@@ -9,7 +9,6 @@
     "musl-gcc",
     "python3",
     "sandbox-exec",
-    "tar",
     "taskkill",
     "where.exe"
   ],

scripts/package-invariants.spec.ts

@@ -49,7 +49,7 @@ function fixture(options: {
     },
     files: ['lib/index.js', 'lib/invariant.js'],
     peerDependencies: options.invariantDependency === false ? {} : {
-      '@deepseek-ai/dsh-invariants': '^0.0.1',
+      '@deepseek-ai/dsh-invariants': 'workspace:^',
     },
     devDependencies: options.invariantDependency === false ? {} : {
       '@deepseek-ai/dsh-invariants': 'workspace:^',