[aaronphifer]

Maintenance-only release.

Changes:

• Fix duplicated plot-format requests in variaq_report_campaign when both formats: ["plots"] and plots: true are supplied; formats is now canonical and plots: true only ensures "plots" appears once.
• Update GitHub Actions to Node 24-native action versions (actions/checkout@v6, actions/setup-node@v7, actions/setup-python@v7) to resolve Node 20 deprecation warnings while preserving existing workflow behavior.
• Apply a compatible overrides remediation for npm audit findings in the bb-app development dependency chain; runtime dependencies remain clean.
• Clean up stale/duplicated Unreleased sections in CHANGELOG.md.

Compatibility unchanged:

• VariaQ 0.6.x
• schema_version 1
• BB 0.43.x
• Plugin SDK 0.4.104

Local verification:

• npm run typecheck: passed
• npm run sdk:check: passed (SDK/host 0.4.104)
• npm run test:unit: 86 passed, 1 skipped
• npm run test:integration (VariaQ v0.6.0): 22 passed, 2 skipped
• npm test: 86 passed, 25 skipped
• npm run build: passed
• npm pack --dry-run: bb-plugin-variaq-0.5.1.tgz, 12 files
• npm audit: 0 vulnerabilities
• npm audit --omit=dev: 0 vulnerabilities
• git diff --check: clean

No feature additions, no VariaQ changes, no UI/Triagewall/Ollama Fleet/QPU work.