chore(deps): consolidate dependency updates

[filipdanisko]

Summary

• consolidate the dependency updates from chore(deps): bump github.com/gofrs/flock from 0.12.1 to 0.13.0 in /packages/cli #3, chore(deps): bump actions/checkout from 4.3.1 to 7.0.1 #4, Bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.4.3 in /packages/cli #5, chore(deps): bump pnpm/action-setup from 5.0.0 to 6.0.9 #6, Bump node from 22-bookworm-slim to 26-bookworm-slim #7, chore(deps): bump actions/setup-go from 5.6.0 to 7.0.0 #8, chore(deps): bump actions/setup-node from 4.4.0 to 7.0.0 #9, chore(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.3 #10, chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in /packages/cli #12, chore(deps-dev): bump @types/node from 20.19.43 to 26.1.2 #18, chore(deps): bump mermaid from 11.15.0 to 11.16.0 #19, chore(deps-dev): bump vitest from 3.2.6 to 4.1.10 #20, chore(deps-dev): bump oxlint from 1.15.0 to 1.76.0 #21, chore(deps-dev): bump playwright from 1.61.1 to 1.62.1 #22, and chore(deps): bump golang.org/x/term from 0.42.0 to 0.45.0 in /packages/cli #23
• update Go modules, npm tooling, GitHub Actions, the web runtime image, lockfiles, checksums, notices, and generated Mermaid viewer assets
• raise the supported Node.js minimum from 18 to 20 and verify the npm wrapper and web workspace on Node 20
• update TOML parser assertions for the current dependency diagnostics
• group future Dependabot updates by npm, Go, GitHub Actions, and Docker ecosystem

Compatibility

The npm wrapper and web workspace now require Node.js 20 or later. The production web container moves from Node.js 22 to Node.js 26.

Verification

• pnpm test
• pnpm build twice with identical generated diff
• pnpm test:race
• pnpm test:coverage (67.9% total statement coverage)
• go vet ./packages/cli/...
• pnpm test:browser (9/9)
• npm wrapper tests, packed npm smoke test, web tests, and web build on Node.js 20.20.2
• pnpm install --frozen-lockfile
• okn validate Wiki (passes with the existing OKF 0.2-vs-0.1 warning)
• workflow pin, permission, security, and container-policy checks through pnpm test

A local Docker build was attempted, but Docker Desktop stalled while fetching Docker Hub base-image metadata before any build step.