#1800 deps-audit skips deno-runner and agent-runner lockfiles in ci.yml

The 'Check for outdated dependencies' step in .forgejo/workflows/ci.yml (line 29) enumerates scope directories in a space-separated find expression:

find vault datastore model codegen issue-lifecycle kubernetes workflows cve ssh software-factory container-image git -name "deno.lock" -exec dirname {} \;

Both deno-runner/deno.lock and agent-runner/deno.lock exist on disk but neither directory appears in that list, so deno outdated never runs against them and outdated deps in those two extensions are silently missed.

agent-constraints/planning-conventions.md already calls this find expression out as a CI fan-out checklist item that must be updated when a new extension directory is added; these two were missed.

Fix: add deno-runner and agent-runner to the find directory list. Consider replacing the hardcoded list with a repo-wide find that prunes node_modules, so future extensions can't be silently uncovered.

Found while triaging #1799 (unrelated to that issue's scope).