Fixes the dependency audit failure in 3.5.0 by updating fast-uri, hono and qs. Keeps native private image previews through get_document_image.
Publishing now enforces the dependency audit in the workflow and prepublish lifecycle. Quality passed on this exact commit before release: https://github.com/krffl/tododdle-mcp/actions/runs/34486325889
Validation: 59 tests, coverage, TypeScript, formatting, API parity and package review pass. npm audit reports zero vulnerabilities.