fix: bump mysql2 to 3.22.0 closing the credential-leak advisory

[LeXwDeX]

Why

Dependabot alert 110 (high, open): mysql2 < 3.22.0 leaks plaintext credentials via an auth-plugin downgrade to mysql_clear_password. packages/console/core/package.json pins 3.14.4.

Scope

• packages/console/core/package.json + workspace lockfile.

Approach

• Bump mysql2 to 3.22.0 (keep the exact-pin style), refresh the lockfile via bun install, verify the console package typechecks and its tests pass.

Acceptance

• Dependabot alert 110 closes (or its vulnerable range no longer matches the pinned version); bun install clean; console typecheck green.

[LeXwDeX]

SpecGit delivery branch: test/512-leftover-hardening (draft pull request #516).

[LeXwDeX]

Delivered by PR #516 (merged into dev at 94f5471). GitHub only fires Closes references on PRs targeting the default branch, so this is closed manually; the sync PR to main carries the delivery onward.