chore(deps): refresh toolchain and actions

[steipete]

Summary

• update pnpm to 11.20.0, Oxfmt to 0.62.0, and Oxlint to 1.77.0
• update CodeQL Action from 4.37.4 to 4.37.6
• update pnpm/action-setup to 6.0.10 and pin its reviewed immutable commit in CI, release, and Crabbox hydration
• apply the two source line-wrap changes required by Oxfmt 0.62

Verification

• pnpm outdated --json returned {}
• pnpm typecheck
• pnpm lint
• pnpm format:check
• pnpm test — 29 files passed, 900 tests passed, 1 skipped
• pnpm build
• pnpm pack:smoke — packaged CLI mapped 13 features (3 CUDA)
• pnpm website:smoke — passed
• node dist/cli.js --version — 0.7.2
• built CLI help rendered successfully
• autoreview clean with no accepted or actionable findings

npm 12 is intentionally excluded: it is a major release, and the parked Trusted Publisher repair prevents the required live publish proof. npm 11.16.0 remains the latest npm 11 release.