Remove unused NodeCodeLoader class

[steffenloesch]

Description

Removes the unused NodeCodeLoader class, and thereby resolves security concerns around some code in it.

Breaking Changes

Removes internal APIs NodeCodeLoader and NodeAllowList.

[Copilot]

Pull request overview

Removes the internal NodeCodeLoader / NodeAllowList APIs (and their export surface), and updates the repo’s API/type-compat validation expectations to acknowledge the breaking change.

Changes:

• Deleted nodeCodeLoader.ts (removing NodeCodeLoader and NodeAllowList implementations).
• Removed re-exports from the services package entrypoint.
• Updated type validation config + generated type-compat tests to expect compatibility breaks.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 8 comments.

File	Description
server/routerlicious/packages/services/src/test/types/validateServerServicesPrevious.generated.ts	Adds @ts-expect-error annotations so generated type-compat checks compile despite expected breaking changes.
server/routerlicious/packages/services/src/nodeCodeLoader.ts	Removes the NodeCodeLoader/NodeAllowList implementation entirely.
server/routerlicious/packages/services/src/index.ts	Stops exporting the removed internal APIs from the package entrypoint.
server/routerlicious/packages/services/package.json	Declares expected type-compat breaks for the removed classes/statics in typeValidation.broken.

---

You can also share your feedback on Copilot code review. Take the survey.