Apply npm audit fix updates with mandatory release-age guard

[Copilot]

This updates dependencies using the required npm audit fix --min-release-age=7 workflow and applies only the resulting lockfile changes. Scope is intentionally limited to dependency resolution output from that command.

• Dependency security refresh (guarded)

  • Ran audit remediation with the required minimum release age constraint to avoid adopting newly-published packages.
  • Kept unresolved vulnerabilities that require breaking (--force) upgrades out of scope.

• Change scope

  • Updated only:
    • package-lock.json
  • No source, config, or test files were modified.

• Command applied

  npm audit fix --min-release-age=7

Original prompt

Run npm audit fix --min-release-age=7 in this repository. The --min-release-age=7 flag is mandatory and must be included exactly, otherwise CI will fail. Apply only the resulting dependency/lockfile changes from that command. Then run the repository's existing validation/tests relevant to the changed package(s). If the command results in no file changes, do not create a commit and do not open a PR; report that no changes were needed.