packages/builder is publishable (private:false) but depended on the private workspace package at runtime - a published manifest would advertise an unresolvable dependency. tsup's noExternal inlines it into the bundle, so devDependencies is the correct home. Also removes the root tsconfig.json, which still pointed at the deleted src/, and corrects two README paths the move invalidated.