docs: expand Socket CLI comparison with concrete examples and structured sections

[raj-krr]

Summary

Expanded the Socket CLI comparison section in website/docs/comparison.md to provide a more detailed and balanced comparison with CVE Lite CLI.

Why this change

The existing Socket CLI section was significantly shorter than the Dependabot, npm audit, OSV-Scanner, and Snyk comparisons. It did not fully explain the different security problems each tool addresses or how they complement each other.

This update adds more context around threat models, feature differences, practical use cases, and recommended workflows so developers can better understand when to use each tool.

What changed

• Added an overview explaining the different goals of CVE Lite CLI and Socket CLI
• Added a threat-model comparison section
• Added a feature comparison table
• Added practical examples for vulnerability detection and supply-chain risk detection
• Added sections describing where each tool has advantages
• Added a "Why results differ" section
• Added a recommended combined workflow showing how the tools complement each other
• Added notes about Socket's paid features and CVE Lite CLI's account-free workflow

Validation

• Reviewed the updated documentation locally
• Verified Markdown formatting and table structure
• Confirmed the new section follows the same depth and structure as other comparison sections in comparison.md

User-facing impact

Does this change:

• affect scanning behavior
• affect output formatting
• affect JSON output
• affect docs only

Notes

The comparison intentionally presents Socket CLI and CVE Lite CLI as complementary tools rather than direct substitutes. The goal is to help users understand the different types of security risks each tool is designed to address.