perf(rules): fingerprint Next.js async API manifest

[aidenybai]

What changed

nextjs-async-dynamic-api-not-awaited now fingerprints the nearest package manifest instead of being classified as globally unbounded for sidecar caching.

Why

The rule wrapper reads only the owning package manifest to determine its Next.js gate. Recording that bounded dependency lets unchanged files reuse cached diagnostics without sacrificing correctness when Next.js metadata changes.

Regression review

• records both the nested manifest existence probe and owning package.json content
• repeats collection to cover memoized manifest lookup
• keeps project-wide rules without a sound bound in the unbounded set
• complete plugin suite: 24,795 passed, 201 skipped
• full repository tests, lint, typecheck, formatting, JSON-report smoke test all pass
• React Doctor changed-scope scan: 100/100, no issues
• patch changeset included

This PR is independent and targets main.

[pkg-pr-new]

Open in StackBlitz

npm i https://pkg.pr.new/eslint-plugin-react-doctor@1480

npm i https://pkg.pr.new/oxlint-plugin-react-doctor@1480

npm i https://pkg.pr.new/react-doctor@1480

commit: acdb0c8

[github-actions]

Interactive terminal E2E

Recorded from the built CLI at acdb0c8 in a real terminal. The fixture holds Git busy for three seconds, so Scanning... must appear immediately after project selection, then exercises the compact interactive report.

Download the GIF and MP4 artifact