build(deps): consolidate green version bumps

[dependabot]

Consolidates the already-green automated dependency updates into one linear branch rebased onto current main:

• build(deps): bump actions/setup-node from 4 to 7 #103 — actions/setup-node 4 → 7
• build(deps): bump wasm-bindgen-test from 0.3.72 to 0.3.77 #104 — wasm-bindgen-test 0.3.72 → 0.3.77
• build(deps): bump thiserror from 2.0.18 to 2.0.20 #105 — thiserror 2.0.18 → 2.0.20
• build(deps-dev): bump mocha from 11.8.0 to 12.0.0 in /extension #106 — mocha 11.8.0 → 12.0.0
• build(deps-dev): bump @vscode/test-cli from 0.0.10 to 0.0.15 in /extension #108 — @vscode/test-cli 0.0.10 → 0.0.15
• build(deps): consolidate green version bumps #109 — indexmap 2.14.0 → 2.14.1
• build(deps-dev): bump tsx from 4.22.4 to 4.23.13 in /extension #110 — tsx 4.22.4 → 4.23.13

PR #102 merged while this aggregate was being assembled, so its duplicate serde commit was dropped during the final rebase.

Local verification:

• cargo fmt --all -- --check
• cargo clippy --all-targets --all-features -- -D warnings
• cargo check --all-targets --all-features --locked
• cargo test --all-features --locked
• cargo build --release --locked
• extension TypeScript compile
• 66 extension unit tests

The shared extension lockfile was regenerated after combining the npm bumps.