build(deps): refresh tooling and retain Node 22 typings

[steipete]

Keep Node declarations aligned with the CLI’s documented Node 22 runtime floor, and suppress Dependabot major updates for @types/node until that floor changes. This records the compatibility decision behind closing #223.

Update Oxfmt to 0.70.0, Oxlint to 1.85.0, and pnpm to 11.27.1 now that they clear the existing 48-hour release-age policy. Keep the Crabbox hydration pin synchronized and move the registry test fetch factory to module scope to satisfy the updated linter. Runtime source, engine requirements, and the release version remain unchanged.

Validation: AWS Crabbox passed frozen install, typecheck, lint, formatting, coverage (964 tests passed, two platform skips), build, and installed-package smoke (13 mapped features). The first lint run identified the nested test helper; the final full gate passed after that cleanup. Independent Codex autoreview covered the final diff through P2.

No changelog entry: these are development-tool and dependency-automation updates with no user-visible behavior change.

[clawsweeper]

🦞👀
ClawSweeper picked this up.

Pull request received. I will update this pull request when review starts.

ClawSweeper review complete

ClawSweeper finished reviewing this revision. The review result is being finalized.

View the workflow run.

[clawsweeper]

ClawSweeper status: review started.

I am starting a fresh review of this pull request: build(deps): refresh tooling and retain Node 22 typings This is item 1/1 in the current shard. Shard 0/1.

This temporary status tracks the active review worker. The completed review will appear in the durable ClawSweeper review comment.

Crustacean status: shell secured, claws on keyboard, evidence pebbles being sorted.