chore: release cli 0.10.45, core 0.7.42

[vivek7405]

Release bumps for the two packages carrying unreleased work.

@webjsdev/cli 0.10.44 -> 0.10.45

• feat: fold auth into the default template as a gallery card, drop saas (feat: fold auth into the default template as a gallery card, drop saas #1040)
• feat: add streaming-action, view-transition, and webjs-suspense gallery demos (feat: add streaming-action, view-transition, and webjs-suspense gallery demos #1039)

These ship the new scaffold to users (npm create webjs@latest currently still generates the pre-#1040 saas-era scaffold).

@webjsdev/core 0.7.41 -> 0.7.42

• fix: correct core .d.ts type surface (phantom base + register param) (fix: correct core .d.ts type surface (phantom base + register param) #1038)

Notes

• Patch bumps: dependents pin @webjsdev/core: ^0.7.1 and @webjsdev/cli: ^0.10.0, so no dependent range edits are needed.
• package-lock.json regenerated (also reconciled a pre-existing stale server 0.8.54 -> 0.8.55 lock entry to the already-released version).
• Changelogs auto-generated by the pre-commit backfill from the conventional PR titles.
• Merging adds the changelog/**.md files to main, which triggers release.yml to npm publish and cut GitHub Releases (idempotent).

[vivek7405]

Decision: why this release is cli + core only (ui deliberately excluded)

#1040 also touched packages/ui/src/registry/extract.js, so a naive "any package whose tree changed" sweep flags ui for a release. It is deliberately left out:

• The only ui change was removing a dead re-export (export { isCustomElementSource, stripExample }) that had ZERO consumers (both names are still exported from registry/local and registry/example, which is where add.js imports them). No behaviour changed.
• Releasing ui here would make the changelog backfill attribute feat: fold auth into the default template as a gallery card, drop saas #1040's title, "feat: fold auth into the default template", to @webjsdev/ui, which is misleading (that feat is the cli scaffold, not the ui kit).
• WebJs has no users yet, so the harmless dead-export removal can ride to ui's next real release rather than forcing a misattributed one now.

server / mcp / intellisense have no unreleased qualifying commits since their last release. So: cli 0.10.44 to 0.10.45 (the #1039 + #1040 scaffold feats) and core 0.7.41 to 0.7.42 (the #1038 .d.ts fix). Patch bumps stay inside the ^0.10.0 / ^0.7.1 dependent ranges, so no dependent edits.