fix(install): handle transitive folder dependencies

[dylan-conway]

What does this PR do?

Sometimes packages are published with file: dependencies. The pr installs them with symlinks, without erroring if the target does not exist

fixes #10324
fixes #11519

How did you verify your code works?

added tests

[github-actions]

❌ @dylan-conway, your commit has failing tests :(

💻 2 failing tests Darwin x64 baseline

• test/js/web/fetch/fetch.stream.test.ts 1 failing
• test/js/web/websocket/websocket.test.js 1 failing

🐧🖥 1 failing tests Linux x64 baseline

• test/integration/mysql2/mysql2.test.ts 2 failing

🪟💻 1 failing tests Windows x64 baseline

• test/cli/install/registry/bun-install-registry.test.ts 1 failing

🪟💻 3 failing tests Windows x64

• test/cli/install/overrides.test.ts 1 failing
• test/integration/next-pages/test/dev-server.test.ts 1 failing
• test/js/bun/http/serve-body-leak.test.ts 1 failing

View logs

[Jarred-Sumner]

Thank you for writing these tests

I think everything in the PR fine except for the verify symlink part. That part should be changed to either:

• do no checks at all, just verify package.json version like we do elsewhere
• verify each symlink by re-creating it. it's just as expensive to create a bunch of symlinks as it is to check if those symlinks are valid. and, checking if symlinks are valid is a TOCTOU race condition