Harden media lifecycles and refresh dependencies

[zortos293]

Summary

• refresh compatible runtime/tooling dependencies and security overrides, reducing the npm audit result from 19 findings to zero while keeping major build-system migrations separate
• stop sessions that finish creating after launch cancellation, stop late microphone captures after disposal, and keep one video-frame callback loop across track replacement
• keep authorized active-session requests on the main-owned provider endpoint, validate discovered CloudMatch origins as clean NVIDIA HTTPS endpoints, and reject redirects before credentials can cross origins
• make npm/package-lock authoritative in CI, add the Electron production build to PR validation, and make targeted test arguments reach the complete test runner
• remove the stale Bun lock and temporary test captures, correct repository hygiene rules, and clear existing lint warnings/dead bindings

Verification

• npm --prefix opennow-stable ci
• npm --prefix opennow-stable audit
• npm --prefix opennow-stable audit --omit=dev
• npm --prefix opennow-stable run lint
• npm --prefix opennow-stable run typecheck
• npm --prefix opennow-stable test — 449 passed
• npm --prefix opennow-stable run build
• parsed .github/workflows/auto-build.yml with js-yaml
• git diff --check

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 6ce97c68-a4f4-4c5e-a3a1-885f40fa8408

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}