chore: release v1.38.17

[avoidwork]

Description

• Bump version to 1.38.17 (patch)
• Update CHANGELOG.md

Type of Change

• Bugfix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation update
• Refactor (no functional changes)
• Performance improvement
• CI / build / tooling

Testing

• [x]

@avoidwork/madz@1.38.17 lint
oxlint *.js src tests/unit tests/integration tests/tui && oxfmt *.js src tests/unit tests/integration tests/tui --check

Found 0 warnings and 0 errors.
Finished in 30ms on 155 files with 98 rules using 24 threads.
Checking formatting...

All matched files use the correct format.
Finished in 77ms on 155 files using 24 threads. passes

• Tests pass with maintained line coverage
• No forbidden patterns used
• Conventional Commit style applied

Checklist

• [x]

@avoidwork/madz@1.38.17 lint
oxlint *.js src tests/unit tests/integration tests/tui && oxfmt *.js src tests/unit tests/integration tests/tui --check

Found 0 warnings and 0 errors.
Finished in 27ms on 155 files with 98 rules using 24 threads.
Checking formatting...

All matched files use the correct format.
Finished in 73ms on 155 files using 24 threads. passes

• Tests pass with maintained line coverage
• No hardcoded secrets or credentials introduced
• Environment variable configuration used (no config file logic)
• Code coverage maintained (pre-commit will enforce this)
• Threat model considerations addressed in PR description