fix(deps): npm audit fix (scheduled security scan)

[github-actions]

🔒 npm audit auto-fix

npm audit fix was run automatically because the scheduled security scan found vulnerabilities on main.

Updated packages

Package	From	To	Severity
source-map-js	1.2.1	1.2.2	—

✅ npm audit is clean after this fix – CI should pass.

What changed?

Only package-lock.json – no changes to package.json.

Merge order

Merge directly into main once CI is green.

This PR is updated in place by later scheduled runs – the branch audit-fix/scheduled is force-pushed, so local checkouts need a fresh pull.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: fcdc2c77-4887-4ba1-bb38-1c2eda928d55

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

_{Comment @coderabbitai help to get the list of available commands.}