Salvaged from #120253 by jonpol01 (Sweep) — the diff applies unchanged
onto current main.
RUNTIME_PATHS listed only apps/desktop/*, but apps/shared/src is compiled
into BOTH bundles: the renderer through the vite alias '@hermes/shared' ->
../shared/src (plus the file: dependency on apps/shared/package.json), and
the Electron main process by relative import (bootstrap-runner.ts,
hardening.ts, translucency.ts import '../../shared/src/...'). A fix
confined to shared code (the JSON-RPC layer, the gateway client) left the
installed app just as stale as a renderer change, but the skew detector
stayed silent about it.
Add apps/shared/src and apps/shared/package.json to RUNTIME_PATHS so
shared-only commits count toward desktopCommitsBehind/outOfSync; non-runtime
shared content (e.g. README.md) stays excluded, covered by the new
it.each regression test.
Fixes#120252
680ea95123