[Pepps233]

Summary

Update runtime libraries and synchronize Node declarations.

Reasoning

Current stable libraries require small API/type migrations. Preserve Node 22.19.0 runtime support and missing-credential behavior, while avoiding hoisting-dependent imports and duplicate Node declaration versions.

Changes

• Pin keyring 2.1.2, Chalk 6.0.1, diff 9.0.0, highlight.js 11.12.0, HTTP/HTTPS proxy agents 9.1.0, and xterm/headless 6.0.0.
• Synchronize @types/node at 26.6.5 without requiring new runtime APIs.
• Handle native keyring null results, string-or-buffer socket callbacks, modern path types, and ArrayBuffer-backed request bytes.
• Use the public highlight.js entry point and portable Headers.forEach conversion.
• Refresh distribution locks and the standalone sandbox lock (shell-quote 1.12.0 fixes both reported shell-quote advisories).
• Update extension dependency docs and sandbox install guidance.

Sandbox-runtime is intentionally retained at 0.0.26 with maintainer approval: latest 0.0.81 introduces node-forge 1.4.0 with unpatched GHSA-86w9-cpqp-85rv.

Testing

• npm run check passed.
• ./test.sh passed with isolated credentials.
• Direct keyring, syntax-highlight, version-check, Codex compression, Unix client/server, and find tests passed.
• Clean external-only distribution-lock install in a temporary directory passed.