chore: Release 2.2.9

[TheRealAgentK]

Summary

Prepare the Raygun4Node 2.2.9 maintenance release.

• update the package and root lockfile version to 2.2.9
• add curated 2.2.9 release notes covering dependency remediation, npm supply-chain hardening, Dependabot policy, tooling refreshes, and example updates
• refresh both example lockfiles so their local Raygun package metadata references 2.2.9

There are no public API or runtime behavior changes. Compared with the published 2.2.8 npm tarball, the release candidate has the same 28-file payload; only package.json and CHANGELOG.md differ.

The examples are current within their intended dependency ranges. The Express example remains intentionally on Express 4; moving it to Express 5 is a separate compatibility migration rather than part of this maintenance release.

Verification

• npm ci --ignore-scripts
• npm run prepare
• npm test — 258 tests passed
• npm run test:cjs
• npm run eslint
• npm run tseslint
• npm exec -- prettier --check "lib/*.ts" "test/*.js" "examples/**/*.js"
• npm audit --omit=dev — 0 vulnerabilities
• npm audit signatures — 468 verified registry signatures, 111 verified attestations
• known-malicious-version lockfile check passed
• both example clean installs, production audits, signature audits, and smoke checks passed
• npm publish --dry-run passed
• npm pack --dry-run --json produced the expected 28-file, 32.3 kB package
• candidate tarball compared against published 2.2.8
• git diff --check

[QuantumNightmare]

👍