chore: define Node runtime and @types/node policy

[charlesrhoward]

Summary

• add a documented Node runtime/types policy at docs/engineering/node-runtime-types-policy.md
• standardize project Node engines to >=22 <23 (root + web) and align @types/node to ^22.19.11
• make CI consume .nvmrc via actions/setup-node to prevent Node version drift
• tighten Dependabot behavior for predictable non-breaking updates, including explicit @types/node major ignores

Validation

• pnpm lint
• pnpm -C web run lint
• pnpm typecheck
• pnpm -C web exec tsc --noEmit
• pre-push hooks also passed: pnpm build and pnpm -C web build

Closes #33

---

Note

Low Risk
Primarily config/docs updates to Node version pinning and Dependabot grouping/ignores; minimal runtime impact beyond enforcing Node 22 in local/CI.

Overview
Standardizes the repo on Node.js 22.x by tightening engines.node in both package.json files, updating @types/node to ^22.19.11, and switching GitHub Actions CI to read the Node version from .nvmrc.

Adds a documented runtime/types policy at docs/engineering/node-runtime-types-policy.md and updates contributor docs to reflect it.

Tightens Dependabot to reduce PR noise and avoid breaking upgrades by lowering PR limits, grouping minor/patch updates, and ignoring major updates by default (with explicit ignores for @types/node majors and selected deps like three minor bumps).

^{Written by Cursor Bugbot for commit 3d4aada. This will update automatically on new commits. Configure here.}

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
agent-space-web	Ready	Preview, Comment	Feb 15, 2026 6:28pm