chore(deps): update all dependencies to latest

[bryantbiggs]

Refreshes every dependency across the workspace to its latest published version, regenerating the lockfile and all four bundled dist/ outputs from scratch.

npm (root dev):

• @types/node ^25.9.1 → ^26.1.1
• eslint ^10.4.1 → ^10.7.0
• esbuild ^0.28.0 → ^0.28.1
• typescript-eslint ^8.60.0 → ^8.65.0
• vitest ^4.1.8 → ^4.1.10

npm (actions):

• @aws-sdk/client-cloudfront ^3.1057.0 → ^3.1092.0
• @aws-sdk/client-sts ^3.1057.0 → ^3.1092.0
• uuid ^14.0.0 → ^14.0.1
• undici 6.26.0 → 6.27.0 (transitive, picked up by the lockfile regen)

GitHub Actions (SHA-pinned, comment tracks the tag):

• actions/checkout v6 → v7
• actions/setup-node v6 → v7
• softprops/action-gh-release → v3.0.2
• actions/stale → v10.4.0

pre-commit (infra):

• antonbabenko/pre-commit-terraform v1.106.0 → v1.108.0

held at 6.0.3 — typescript, because typescript-eslint 8.65.0 declares peer typescript >=4.8.4 <6.1.0 and does not yet support TypeScript 7; installing 7.0.2 fails peer resolution.

Supersedes #116, #115, #113, #109.