#2125 chore(deps): upgrade all npm dependencies to latest

Upgrades all npm dependencies in package.json to their latest published versions, and drops @typescript/native-preview.

The repo enforces a 7-day quarantine on new releases (minimum-release-age = 604800 in bunfig.toml, min-release-age=7 in .npmrc). This update deliberately bypasses it via bun update --latest --minimum-release-age=0, so several packages here are newer than 7 days.

Notable upgrades

• @oh-my-pi/pi-coding-agent / @oh-my-pi/pi-natives 16.3.15 -> 17.0.5 (major)
• droid 0.168.2 -> 0.175.0
• openclaw 2026.6.11 -> 2026.7.1-2
• deepsec 2.1.2 -> 2.2.3
• tokscale 4.3.0 -> 4.5.3
• @redwoodjs/agent-ci 0.16.2 -> 0.17.1
• @anthropic-ai/claude-code 2.1.205 -> 2.1.215
• @openai/codex 0.144.0 -> 0.144.6
• plus ~25 smaller bumps across the CLI toolchain

Removal

@typescript/native-preview is dropped from both dependencies and trustedDependencies. Nothing else in the repo referenced the package or its tsgo binary.

Manual corrections after bun update

bun update --latest rewrote the manifest in two ways that did not match the existing conventions, both reverted by hand:

1. It stripped every ^ range and pinned exact versions. Carets were restored to match the prior style.
2. It collapsed the platform-specific @openai/codex-* aliases from npm:@openai/codex@<ver>-<platform> down to a plain npm:@openai/codex@0.144.6, which would have pulled the generic package on every platform. The -darwin-arm64 / -linux-x64 / -win32-* suffixes were restored at 0.144.6 (verified those tags exist on the registry).

Verification

bun install reconciles cleanly against the corrected ranges. Only package.json and bun.lock are touched.