v0.1.10: State validation, declaration-type fixes, audit clean

State validation, declaration-type fixes, audit clean

Three-issue fix batch plus a routine mcp-ts-core bump that clears the dependency audit.

Changed:

• fema_search_nfip zip_code tightened to exactly 5 digits

Fixed:

• Declaration-type render prefixes — fema_search_disasters and fema_get_disaster render the real declaration_type (FM-, EM-, DR-) instead of a hardcoded DR-; PA and housing tools use a type-agnostic Disaster # label (#11)
• invalid_state validation now consistent across all four state-scoped tools — fema_get_public_assistance, fema_get_housing_assistance, fema_search_nfip (#12)
• fema_search_nfip throws no_results instead of a silent 0-of-0 success (#13)

Security:

• bun audit 7 → 0 advisories — hono resolved to 4.12.27 (1 high, 4 moderate CORS/GHSA advisories cleared), transitive esbuild resolution dropped (1 low advisory cleared)

Dependency bumps:

• @cyanheads/mcp-ts-core ^0.10.9 → ^0.10.10
• @biomejs/biome ^2.5.0 → ^2.5.2
• @types/node ^26.0.0 → ^26.1.0
• tsc-alias ^1.8.17 → ^1.9.0

73 tests pass; bun run devcheck clean.