fix: keep published Direct source erasable

[0thernet]

Summary

• removes the parameter property that fails strict consumer builds with erasableSyntaxOnly
• enables erasableSyntaxOnly in the package typecheck so this consumer boundary stays enforced
• advances the exact supported release and installation references to v0.7.17

Validation

• bun run typecheck
• bun test src/tooling/bombadil-runner.test.ts
• bunx eslint src/tooling/bombadil-runner.ts scripts/npm-publish-workflow.test.ts
• npm release workflow contract cases pass; sandboxed nested package-smoke cases are blocked only by local Bun temp-directory permissions and remain CI-owned
• git diff --check

The repository aggregate gate was routed through hra-host-run as required, but this task permission profile rejected host admission before the child command ran. CI owns the required final gate.