fix(extensions): avoid premature block-comment close; mark package as ESM

- protected-paths.ts: reword comment that contained a globstar+slash sequence which closed the /** */ block early (caused a ParseError at load)
- package.json: add "type": "module" (extensions are ESM)

Verified locally: pi install ./, all 5 commands + 4 skills load via RPC get_commands, /kit-config prints values+source, dynamic config change reflected, protected-paths + permission-gate pass a behavioral test suite.

extensions/protected-paths.ts

@@ -9,7 +9,7 @@
  *       `*`  matches within one path segment,
  *       `**` matches across segments,
  *       `?`  matches a single character.
- *       A leading `**/` means "in any directory".
+ *       A leading globstar + slash means "in any directory".
  *
  * DISABLE: Remove/rename this file from the package `extensions/` folder,
  *       or exclude it via the package manifest / settings.

package.json

@@ -2,6 +2,7 @@
   "name": "@mvideo/pi-kit",
   "version": "0.1.0",
   "private": true,
+  "type": "module",
   "description": "Корпоративный Pi-пакет: шаблоны задач, guardrails и скиллы для команды.",
   "keywords": [
     "pi-package",