fix(ci): unblock CI on docs-font branch

- Add lsof to knip ignoreBinaries so the new `pnpm docs` script
  (which uses `lsof -ti:3000` to free port 3000) does not trip
  the Unlisted binaries check.
- Make CLI version assertions read @ktx/cli/package.json at runtime
  instead of hardcoding 0.0.0-private. The 0.4.0 release commit on
  main bumped the package version, breaking 18 hardcoded test cases
  in index.test.ts and admin-reindex.test.ts; reading the version
  dynamically keeps the suite green across future version bumps.

knip.json

@@ -86,7 +86,7 @@
     "**/*.gen.ts",
     "**/*.generated.ts"
   ],
-  "ignoreBinaries": ["uv"],
+  "ignoreBinaries": ["uv", "lsof"],
   "ignoreIssues": {
     "packages/cli/src/clack.ts": ["exports"],
     "packages/cli/src/commands/connection-metabase-setup.ts": ["exports", "types"],