V3 Deno JavaScript/TypeScript runtime capability pack. By-value connector composition (service_kind=cli, no separate ingredient): one local deno CLI ingredient exposes bounded project operations for readiness, formatting checks, lint diagnostics, type checks, dependency graph inspection, dependency vulnerability audit, and sandboxed targeted test execution. Project operations run from an explicit project directory cwd supplied at execution time through the native cli_invocation cwd field, avoid caller-supplied deno flags, avoid shell wrappers, and keep diagnostics visible as text or JSON output. Type-check, info, and audit operations use frozen-lockfile mode. Test execution uses cached-only module loading and disables permission prompts while granting no runtime permissions. The pack intentionally excludes deno task, deno run, compile, publish, add/remove/update, fix/write modes, watch mode, arbitrary permission grants, arbitrary import maps, and caller-selected remote URLs. Requires deno on PATH.