fix: load schema via require() for pkg/esbuild compat

The release binary failed because pkg couldn't find awf-config-schema.json
at runtime — the fs.readFileSync approach didn't work in pkg's snapshot
filesystem. Switch to require() which both esbuild (inlines into bundle)
and pkg (includes in snapshot via static analysis) handle natively.

Also add dist/awf-config-schema.json to pkg.assets as a fallback.

Fixes: Release workflow 'Smoke test binary (x64)' failure

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: lpcox

package.json

@@ -89,7 +89,8 @@
     "scripts": "dist/**/*.js",
     "assets": [
       "node_modules/chalk/**/*",
-      "containers/agent/seccomp-profile.json"
+      "containers/agent/seccomp-profile.json",
+      "dist/awf-config-schema.json"
     ],
     "targets": [
       "node18-linux-x64",

src/schema-validator.ts

@@ -1,39 +1,21 @@
 /**
  * Runtime config validation using the published JSON Schema.
  *
- * The schema JSON is loaded from disk so the emitted JS does not contain a
- * fragile runtime `require('./awf-config-schema.json')`. The canonical source
- * is generated by `scripts/generate-schema.mjs` and kept in sync via CI.
+ * The schema is imported via TypeScript `import` so tsc emits the JSON to
+ * dist/, esbuild inlines it in the bundle, and pkg includes it in the snapshot.
+ * The canonical source is generated by `scripts/generate-schema.mjs`.
  */
 
 import Ajv2020, { ErrorObject } from 'ajv/dist/2020';
-import { existsSync, readFileSync } from 'fs';
-import { join } from 'path';
-
-function loadSchema(): Record<string, unknown> {
-  const candidatePaths = [
-    join(__dirname, 'awf-config-schema.json'),
-    join(__dirname, '../src/awf-config-schema.json'),
-  ];
-
-  for (const candidatePath of candidatePaths) {
-    if (existsSync(candidatePath)) {
-      return JSON.parse(readFileSync(candidatePath, 'utf8')) as Record<string, unknown>;
-    }
-  }
-
-  throw new Error(
-    `Unable to locate awf-config-schema.json. Checked: ${candidatePaths.join(', ')}`,
-  );
-}
+import * as schema from './awf-config-schema.json';
 
 // Compile once (module-level singleton). allErrors collects every violation.
 // verbose=true provides parentSchema on errors for richer formatting.
 const ajv = new Ajv2020({ allErrors: true, verbose: true });
 // 'version' is a metadata keyword (not a standard JSON Schema keyword); register
 // it so Ajv strict mode does not reject the schema.
 ajv.addKeyword({ keyword: 'version' });
-const validate = ajv.compile(loadSchema());
+const validate = ajv.compile(schema);
 
 /**
  * Check if a schema path points to an array-of-strings field by inspecting