chore(release): 1.6.0

[socket-release-bot]

Bumps package.json to 1.6.0 and moves the ## [Unreleased] notes under the 1.6.0 heading.

To release:

1. Review the CHANGELOG section and squash-merge this PR.
2. Dispatch Publish to npm registry on v1.x with dry-run: false. It tags the merge commit, cuts the GitHub release, and stages all three packages.
3. Approve each staged package with pnpm stage approve.

If v1.x moves before this merges, re-dispatch with mode: release-pr to rebuild the bump on the new tip.

---

Note

Low Risk
Version and changelog-only release bump with no runtime code changes.

Overview
Release 1.6.0 — bumps the published CLI version from 1.5.0 to 1.6.0 in package.json and adds a dated ## [1.6.0] section to CHANGELOG.md (2026-10-07).

The new changelog entry documents the shipped feature: manifest now attributes direct JVM dependencies to the subproject build files that declare them (#1581). No application code changes in this PR.

^{Reviewed by Cursor Bugbot for commit 01763d0. Configure here.}