Workspace-aware entry points plus ignore lists for script-only tools and tools knip's binary resolution misses. Adds `npm run knip`.