feat(13-04): wire all 12 Phase 13 sources into RegisterAll (40 total)

- Add 8 package registry sources (npm, pypi, crates, rubygems, maven, nuget, goproxy, packagist)
- Update register_test to assert 40 sources in sorted list
- Update Phase 12 integration test count from 32 to 40

pkg/recon/sources/register_test.go

@@ -16,9 +16,9 @@ func registerTestRegistry() *providers.Registry {
 	})
 }
 
-// TestRegisterAll_WiresAllThirtyTwoSources asserts that RegisterAll registers
+// TestRegisterAll_WiresAllFortySources asserts that RegisterAll registers
 // every Phase 10 + Phase 11 + Phase 12 + Phase 13 source by its stable name on a fresh engine.
-func TestRegisterAll_WiresAllThirtyTwoSources(t *testing.T) {
+func TestRegisterAll_WiresAllFortySources(t *testing.T) {
 	eng := recon.NewEngine()
 	cfg := SourcesConfig{
 		Registry: registerTestRegistry(),
@@ -36,6 +36,7 @@ func TestRegisterAll_WiresAllThirtyTwoSources(t *testing.T) {
 		"censys",
 		"codeberg",
 		"codesandbox",
+		"crates",
 		"dockerhub",
 		"duckduckgo",
 		"fofa",
@@ -45,14 +46,21 @@ func TestRegisterAll_WiresAllThirtyTwoSources(t *testing.T) {
 		"github",
 		"gitlab",
 		"google",
+		"goproxy",
 		"helm",
 		"huggingface",
 		"k8s",
 		"kaggle",
+		"maven",
 		"netlas",
+		"npm",
+		"nuget",
+		"packagist",
 		"pastebin",
 		"pastesites",
+		"pypi",
 		"replit",
+		"rubygems",
 		"s3",
 		"sandboxes",
 		"shodan",
@@ -77,8 +85,8 @@ func TestRegisterAll_MissingCredsStillRegistered(t *testing.T) {
 		Limiters: recon.NewLimiterRegistry(),
 	})
 
-	if n := len(eng.List()); n != 32 {
-		t.Fatalf("expected 32 sources registered, got %d: %v", n, eng.List())
+	if n := len(eng.List()); n != 40 {
+		t.Fatalf("expected 40 sources registered, got %d: %v", n, eng.List())
 	}
 
 	// SweepAll with an empty config should filter out cred-gated sources