* fix: address all 12 code review findings (bugs, hardenings, cleanups) 🐛 BUG FIXES: - init_wizard: apply user's npm access selection instead of discarding it - lib: fix pre-state path inconsistency (use get_release_dir everywhere) - release_file: normalize CRLF line endings in frontmatter parser - lib: replace parse_from with try_parse_from to avoid process::exit in NAPI - lib: propagate workspace detection errors in cmd_init instead of swallowing 🛡️ HARDENINGS: - changelog: flexible header stripping with case-insensitive fallback - package_json: simplify semver range matching logic, fix false positives - workspace: propagate pnpm-workspace.yaml read/parse errors - bump, premode: warn on invalid glob patterns instead of silent failure 🧹 CLEANUPS: - premode: remove dead version_is_pre_release function - lib: extract shared resolve_package_patterns helper (70% duplication) - changelog: extract indent_continuations helper 🧪 TESTS: - 10 new tests for strip_changelog_header, indent_continuations, CRLF parsing - 79 total tests passing * test: add megatest covering full user flow (8 phases) Covers scaffold → config → release files → plan verification → dry-run → real bump → internal dep updates → pre-release counter. 80 tests passing. Workspace with 8 packages across linked, fixed, pre-mode, and independent scenarios. * refactor: split bump.rs into 6-module dir + extract commands from lib.rs Phase 1: bump.rs (1484 lines) → src/bump/ with mod.rs, plan.rs, groups.rs, deps.rs, apply.rs, discovery.rs — each with a single named responsibility. Phase 2: lib.rs (731→138 lines) → src/commands/ with init.rs, new.rs, status.rs, bump_cmd.rs, check.rs, release.rs, pre.rs — each command has its own file matching the CLI subcommand. 80 tests passing, zero warnings, no API breakage. * refactor: group workspace + pre-release logic into module directories Phase 3: workspace module directory - workspace.rs + package_json.rs → src/workspace/{mod,loader,package_json}.rs - package_json module moved under workspace (re-exported via mod.rs) Phase 4: pre-release module directory - premode.rs → src/prerelease/{mod,state,logic}.rs - Now split into state management (PreState) and logic (resolve/apply) 80 tests passing, zero warnings, no API breakage. * style: run cargo fmt on restructured files