fix(ci): give codewhale-portable-config the codewhale-sanitize dependency

CI 38943023960 on 3cf53b6cb7 failed Lint and MSRV (1.89) with
E0433 "cannot find module or crate `codewhale_sanitize`" at
crates/tui/src/commands/groups/config/permissions.rs:240.
tests/portable-config mounts the real config command group by #[path],
and 53ae15645c (CW-7236) replaced permissions.rs's local bidi helper with
codewhale_sanitize::sanitize::is_bidi_control, which that crate did not
depend on. Local verification of 53ae15645c ran clippy for
-p codewhale-tui only, so it never compiled this crate.

tests/portable-config/Cargo.toml now depends on the path crate
codewhale-sanitize. That crate has no TUI dependency (icu_properties,
regex, serde_json, url), so the portable proof still holds. Cargo.lock
gains the one dependency line.

Verification (tree also holding the #6964 change committed next)
- scripts/dev-cargo.sh clippy --workspace --all-targets --all-features
  --locked -- -D warnings -A clippy::uninlined_format_args
  -A clippy::too_many_arguments -A clippy::unnecessary_map_or: clean.
  This is the CI Lint command.
- scripts/dev-cargo.sh nextest run -p codewhale-portable-config
  -p codewhale-command-contract --locked: 114 tests run: 114 passed.
- cargo fmt --all -- --check: clean.
- Not run locally: cargo +1.89 check --workspace (the MSRV job). It
  failed on this same unresolved crate.

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01NBKbhx19BRbZtvWK8rVKjz

Cargo.lock

@@ -1113,6 +1113,7 @@ version = "0.10.2"
 dependencies = [
  "codewhale-command-contract",
  "codewhale-protocol",
+ "codewhale-sanitize",
  "serde_json",
 ]
 

tests/portable-config/Cargo.toml

@@ -10,6 +10,7 @@ publish = false
 [dependencies]
 codewhale-command-contract = { path = "../../crates/command-contract", version = "0.10.1" }
 codewhale-protocol = { path = "../../crates/protocol", version = "0.10.1" }
+codewhale-sanitize = { path = "../../crates/sanitize", version = "0.10.2" }
 serde_json.workspace = true
 
 [dev-dependencies]