fix(coding-agent): update Undici to 8.10.2

[fitchmultz]

Summary

Update the coding-agent's exact Undici pin from 8.9.0 to 8.10.2 and regenerate its three lockfiles. No Pi runtime code, engine requirement, override or other dependency changes.

Pi's dispatcher installs Undici's global WebSocket, making these vendor fixes relevant to the CLI/Codex path:

• Unrequested-subprotocol crash.
• Malformed-deflate crash.

The update also includes HTTP/1 idle reuse and NO_PROXY fixes. No exploit in live Pi is claimed.

Verification

• Both crashes reproduce on 8.9.0 in bounded localhost child processes using Pi's real dispatcher and global WebSocket; the same probes pass on 8.10.2.
• Native source, rebuilt bundle and separately installed local-package checks pass. Installed bundled behavior is verified on Node 22.19.0 and 24.20.0; unbundled behavior is also verified on 24.20.0.
• Compressed HTTP/SSE and WebSocket traffic, header/body timeouts, abort/reader cancellation, custom fetch, CONNECT reuse and IPv6/trailing-dot NO_PROXY checks pass.
• Existing dispatcher/proxy tests, npm run check and both canonical generated-lock checks pass.
• Offline workspace/Node build passes. The actual CLI-imported chunk contains both fixes and matches the isolated installed package; bundled checks do not load an external Undici copy.

Four metadata files, +13/-13. Vendor regression probes remain local qualification artifacts rather than new Pi runtime wrappers or copied test scaffolding. Bun binaries and live model traffic are not part of this qualification; nothing is merged, released or activated by this PR.