fix(manifest): copy sbt-generated poms out of target/ (REA-437)

[Jeppe Fredsgaard Blaabjerg (jfblaa)]

Summary

• socket manifest scala ran sbt makePom but left every generated pom inside each subproject's target/scala-X.Y/ dir, which is gitignored in standard SBT projects — so downstream SBOM/scan steps that respect .gitignore skipped all of them.
• After sbt finishes, copy each pom out to <projectRoot>/socket.pom.xml (or <basename(--out)>) by walking up to the nearest target/ ancestor. Mirrors what init.gradle already does on the gradle path, just from Node.
• Tightens the success output to one list of destinations to match the gradle command's verbosity.

Linear: REA-437

Test plan

• Run socket manifest scala . on a multi-module sbt project (e.g. circe); confirm a socket.pom.xml lands next to each subproject's target/ and that none of the destinations sit inside a target/ dir.
• Single-module sbt project: confirm --out=./custom.pom.xml writes to that exact path.
• --stdout / socket manifest scala --stdout . behavior unchanged.
• socket scan create after the manifest step now picks up the generated scala manifests.

---

Note

Medium Risk
Moderate risk: changes filesystem output locations for socket manifest scala by copying generated POMs out of target/, which could affect downstream tooling and user expectations around --out in multi-module projects.

Overview
socket manifest scala now copies sbt-generated .pom files out of each module’s gitignored target/ directory into the project root (using the --out basename, or honoring the full --out path when only one POM is produced), and reports the copied destinations.

Adds a target/-ancestor search helper and switches from “generated” logging to listing the exported copy locations; package version is bumped to 1.1.94.

^{Reviewed by Cursor Bugbot for commit acd6d30. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is ON. A cloud agent has been kicked off to fix the reported issue.}

Comment @cursor review or bugbot run to trigger another review on this PR

^{Reviewed by Cursor Bugbot for commit acd6d30. Configure here.}

[Martin Torp (mtorp)]

Requesting an update to the changelog. Otherwise, looks good ✅