feat(monopam): detect unused deps in lint command
Lint now checks both directions:
- Missing: META requires a library whose package is not in opam depends
- Unused: opam runtime dep not needed by META requires or dune files
Scoped deps (with-test, with-doc, build) and implicit deps (ocaml,
dune) are excluded from the unused check. Dune files are scanned for
executable/test library usage to avoid false positives on cmdliner,
eio_main, etc.