Add Xquik import helpers

[kriptoburak]

Summary

• normalize Xquik bookmark records into MarkHarbor bookmarks
• cover handles, URL fallback, media, link cards, and empty-record filtering
• refresh the lockfile to remove current Vite and Undici advisories

Independent repository fix

• update audited transitive dependencies so the repository-required moderate audit gate reports zero vulnerabilities

Validation

• npm ci
• npm test on Node 20: 92 passed
• npm run typecheck on Node 20
• npm run build on Node 20
• npm run package on Node 20
• npm audit --audit-level=moderate: zero vulnerabilities
• git diff --check

The branch is rebuilt from current upstream main as one SSH-signed commit.

[kriptoburak]

Repair published in 119cb9e: rebuilt from current upstream as one SSH-signed commit. The Xquik adapter remains focused in src/shared. The independent repository fix refreshes vulnerable Vite and Undici dependency resolutions, restoring the required audit gate. Node 20 validation passes 92 tests, typecheck, build, package, and a zero-vulnerability moderate audit.