[tensornull]

This PR raises the Node.js security floor for the SDK and makes the blocking CI and publication paths use patched runtimes.

Changes:

• Pin blocking CI, release, live-smoke, and Release Please runners to Node 22.23.4 or 24.22.1; keep Node 26.12.1 as advisory.
• Set the package and lockfile engines range to ^22.23.4 || ^24.22.1.
• Add a runtime preflight and run it first in the offline verification gate.
• Update release/workflow contract checks and runtime documentation.

Validation:

• Node 22.23.4 and 24.22.1: npm run verify:offline passed.
• npm run actionlint passed.
• Locked, minimum, and latest OpenAI compatibility lanes passed.