chore(deps): refresh dependency lockfiles

[TheRealAgentK]

Summary

• refresh all dependencies allowed by the existing package.json ranges
• update the tested Raygun runtime dependency from 2.2.5 to 2.2.7 in the lockfile
• update vulnerable transitive development tooling to patched releases
• refresh the example lockfile's linked-provider metadata from 0.0.3 to 0.0.6 without capturing the root development tree

No declared dependency ranges or provider source code change.

This supersedes #170, #171, #172, #173, and #174, whose proposed lockfile updates are now stale. Those PRs should be closed after this PR merges.

Security

The default branch currently has 19 Dependabot alerts, all in transitive development dependencies. This refresh updates the affected packages, including:

• brace-expansion 5.0.7 / 2.1.2
• sigstore 4.1.1, @sigstore/core 3.2.1, @sigstore/verify 3.1.1
• tar 7.5.21
• fast-uri 3.1.4
• qs 6.15.3
• uuid 14.0.1
• picomatch 4.0.5
• flatted 3.4.3
• ws 8.21.1
• yaml 2.9.0

Both full and production-only npm audits return zero vulnerabilities after the refresh.

Validation

• npm ci / TypeScript compilation
• npm test — 13/13 passing
• npm run eslint
• npm run tseslint
• npm run prettier:check
• root npm audit — 0 vulnerabilities
• root npm audit --omit=dev — 0 vulnerabilities
• example clean install and full/production audits — 0 vulnerabilities
• example success handler invocation — all good!

[TheRealAgentK]

This is a consolidated PR to clean up a first batch of dependabot PRs for this provider. There'll be more to come most likely.