fix(profile-sync-controller): remove leftover cjs pointers

[mathieuartu]

Explanation

References

Checklist

• I've updated the test suite for new or updated code as appropriate
• I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
• I've communicated my changes to consumers by updating changelogs for packages I've changed
• I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

---

Note

Low Risk
Packaging-only path updates with no runtime logic changes; aligns subpath resolution with the existing ESM-only build.

Overview
After the package went ESM-only, several nested package.json files under sdk, auth, and user-storage (including their mocks folders) still pointed main and types at .cjs / .d.cts artifacts.

This PR retargets those entries to .js / .d.ts so tooling that resolves through those subpaths (e.g. Jest’s module map) loads the actual ESM output instead of stale CommonJS paths. The [Unreleased] changelog adds a Fixed note for the change.

^{Reviewed by Cursor Bugbot for commit 3834dbb. Bugbot is set up for automated code reviews on this repo. Configure here.}