Dependency maintenance release.\n\nChanges:\n- Refreshed npm transitive lockfile entries in package-lock.json.\n- Kept application dependencies, runtime pins, Docker, CI, and deployment configs unchanged because they were already aligned with current targets.\n\nValidation:\n- GitHub Actions test (26.4.0) passed on PR #35.\n- Local pre-publish validation passed: npm ci, Jest under node@26.4.0, npm audit, npm outdated, npm audit signatures, npm ls, JSON/YAML parse checks, and git diff --check.