chore(deps): refresh runtime and workflow dependencies

[skvark]

Summary

• consolidate Dependabot updates for actions/setup-node v7 and azure/login v3
• update @inquirer/checkbox and @inquirer/select to 5.2.1 and @inquirer/core to 11.2.1
• also update @inquirer/confirm to 6.1.1 so all prompt packages resolve one compatible core copy and ExitPromptError identity remains stable
• update Biome to 2.5.2, including its schema URL, and Bunup to 0.16.32
• refresh the lockfile and dependency implementation note

Review notes

GitHits upgrade review found no added direct or transitive advisories for the npm updates. The Inquirer prompt releases move together to core 11.2.1. actions/setup-node v7 preserves the workflow inputs used here; azure/login v3 preserves the existing OIDC inputs and moves its action runtime to Node 24, which is supported by the GitHub-hosted runner used by this workflow.

This PR supersedes #213, #214, #215, #216, #217, #218, and #228.

Validation

• bun install --frozen-lockfile
• bun run typecheck
• bun run format:check (LF-normalized committed tree)
• bun run lint
• bun test (2,502 passing)
• bun run build
• bun run build in packages/mcp
• bun run validate:packages:mcp-publish
• bun run smoke:cli:built
• bun run smoke:mcp:built