refactor: Audit remaining JS knowledge consumer reads (#13556)
## Intent
Complete the Phase 8 audit of JavaScript knowledge consumers and migrate
owned script rediscovery onto the native-task catalog.
**Base:** `main`.
## Changes
- Route devtools script serialization through an exact catalog
script-key projection, preserving empty scripts and excluding Cargo
verbs.
- Derive task-access eligibility and synthesized root tasks from
native-task knowledge instead of reparsing `package.json`.
- Remove the task-access loader's `PackageJson` dependency.
- Document remaining compatibility reads assigned to TURBO-5787
follow-up issues.
## Testing
- `cargo test -p turborepo-repository native_tasks`
- `cargo test -p turborepo-devtools`
- `cargo test -p turborepo-turbo-json loader`
- `cargo test -p turborepo-lib task_access`
- `cargo clippy -p turborepo-repository -p turborepo-devtools -p
turborepo-turbo-json -p turborepo-lib --all-targets -- -D warnings`
- `cargo fmt --check`
Closes TURBO-5837.
---------
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Anthony Shew <anthonyshew@users.noreply.github.com>
