chore: bump Node to 26.7.0 and apply npm audit fixes

[iagormoraes]

Bump the Node runtime to 26.7.0 across package.json engines, Dockerfile,
and CI job definitions, and apply semver-compatible npm audit fixes to the
lockfile (npm audit fix --package-lock-only).

Vulnerabilities needing a semver-major bump are intentionally left alone.

Summary

Changes

Testing

Checklist

• I have performed a self-review of my code.
• I have commented my code, particularly in hard-to-understand areas to a borderline excessive amount
• I have made any relevant changes to the documentation, including the project readme.
• I have run and tested the changes locally
• If it is a core feature, I have added appropriate unit tests.
• Any dependent changes have been merged and published in upstream projects.

[gitstream-cm]

🚨 gitStream Monthly Automation Limit Reached 🚨

Your organization has exceeded the number of pull requests allowed for automation with gitStream.
Monthly PRs automated: 250/250

To continue automating your PR workflows and unlock additional features, please contact LinearB.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud