chore(deps): currency sweep — eslint 10, @types/node 26, CI actions v7

Bumps (devDependencies):
- eslint ^9.39.5 -> ^10.9.1
- @eslint/js ^9.39.5 -> ^10.0.1
- @types/node ^22.10.2 -> ^26.4.0
- typescript-eslint ^8.67.0 -> ^8.68.0

CI workflows (ci.yml, publish.yml):
- actions/checkout v4 -> v7
- actions/setup-node v4 -> v7

Full verify (format, lint, typecheck, build, 31 tests) green.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WqKqMnHQHSmkGFfc5t7Rxn

Author: catomean

.github/workflows/ci.yml

@@ -10,8 +10,8 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version: '22'
       - run: npm ci --ignore-scripts

.github/workflows/publish.yml

@@ -33,8 +33,8 @@ jobs:
       # this workflow from this commit.
       id-token: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           # npm >= 11.5.1 is required for trusted publishing (OIDC); Node 24 ships it.
           node-version: '24'