fix(sdk): align module and host resolution

[samzong]

What changed?

• make the Go modules self-contained and verify isolated core, Cobra, and consumer builds
• align non-generic host detection and compatible install target selection across TypeScript, Go, Rust, and Python
• preserve ownership safety across update and uninstall lifecycle cleanup, including duplicate owned targets and malformed metadata
• validate custom host paths and enforce the behavior through 80 shared golden cases

Why

• Closes Make released Go modules self-contained #31
• Closes Align host detection and target path semantics across SDKs #32

Verification

• node scripts/check.mjs