refactor(cli): route HOME reads through src/env/home.mts

5 commands were reading process env directly to construct paths to
~/.config/socket/config.json or ~/.bashrc. Replace with imports of
the typed HOME constant from src/env/home.mts (already used elsewhere
in the codebase) so env access stays centralized.

Files migrated:
- commands/install/cmd-install-completion.mts (bashrc path)
- commands/config/cmd-config-auto.mts
- commands/config/config-command-factory.mts
- commands/login/cmd-login.mts
- commands/logout/cmd-logout.mts

Author: jdalton

packages/cli/src/commands/config/cmd-config-auto.mts

@@ -1,5 +1,6 @@
 import { handleConfigAuto } from './handle-config-auto.mts'
 import { FLAG_JSON, FLAG_MARKDOWN } from '../../constants/cli.mts'
+import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { defineFlags } from '../../meow.mts'
 import { commonFlags, outputFlags } from '../../flags.mts'
@@ -101,7 +102,7 @@ ${getSupportedConfigEntries()
   }
 
   if (dryRun) {
-    const configPath = `${process.env['HOME']}/.config/socket/config.json`
+    const configPath = `${HOME}/.config/socket/config.json`
     outputDryRunWrite(
       configPath,
       `auto-discover and set config value for "${key}"`,

packages/cli/src/commands/config/config-command-factory.mts

@@ -1,4 +1,5 @@
 import { FLAG_JSON, FLAG_MARKDOWN } from '../../constants/cli.mjs'
+import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { commonFlags, outputFlags } from '../../flags.mts'
 import { meowOrExit } from '../../utils/cli/with-subcommands.mjs'
@@ -130,7 +131,7 @@ ${spec.helpExamples.map(ex => `      $ ${command} ${ex}`).join('\n')}
       }
 
       if (dryRun) {
-        const configPath = `${process.env['HOME']}/.config/socket/config.json`
+        const configPath = `${HOME}/.config/socket/config.json`
         const changes = spec.needsValue
           ? [`Set "${key}" to: ${value}`]
           : [`Remove "${key}" from config`]

packages/cli/src/commands/install/cmd-install-completion.mts

@@ -1,4 +1,5 @@
 import { handleInstallCompletion } from './handle-install-completion.mts'
+import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { defineFlags } from '../../meow.mts'
 import { commonFlags } from '../../flags.mts'
@@ -67,7 +68,7 @@ async function run(
   const targetName = cli.input[0] || 'socket'
 
   if (dryRun) {
-    const bashRcPath = `${process.env['HOME']}/.bashrc`
+    const bashRcPath = `${HOME}/.bashrc`
     outputDryRunWrite(
       bashRcPath,
       `install bash completion for "${targetName}"`,

packages/cli/src/commands/login/cmd-login.mts

@@ -1,6 +1,7 @@
 import isInteractive from '@socketregistry/is-interactive/index.cjs'
 
 import { attemptLogin } from './attempt-login.mts'
+import { HOME } from '../../env/home.mts'
 import { outputDryRunWrite } from '../../utils/dry-run/output.mts'
 import { defineFlags } from '../../meow.mts'
 import { commonFlags } from '../../flags.mts'
@@ -82,7 +83,7 @@ async function run(
   const dryRun = !!cli.flags['dryRun']
 
   if (dryRun) {
-    const configPath = `${process.env['HOME']}/.config/socket/config.json`
+    const configPath = `${HOME}/.config/socket/config.json`
     const changes = [
       'Prompt for Socket API token',
       'Verify token with Socket API',

packages/cli/src/commands/logout/cmd-logout.mts

@@ -1,5 +1,6 @@
 import { getDefaultLogger } from '@socketsecurity/lib/logger'
 
+import { HOME } from '../../env/home.mts'
 import { outputDryRunDelete } from '../../utils/dry-run/output.mts'
 import {
   CONFIG_KEY_API_BASE_URL,
@@ -84,7 +85,7 @@ export async function run(
   const dryRun = !!cli.flags['dryRun']
 
   if (dryRun) {
-    const configPath = `${process.env['HOME']}/.config/socket/config.json`
+    const configPath = `${HOME}/.config/socket/config.json`
     outputDryRunDelete('Socket API credentials', configPath)
     return
   }