chore: consolidate green version bumps from #85–#98

[helly25]

Consolidates the green version-bump PRs in the requested #85–#98 range, replayed onto current main:

• build(deps): bump actions/upload-artifact from 4 to 7 #85 — actions/upload-artifact 4 → 7
• build(deps): bump actions/download-artifact from 4 to 8 #86 — actions/download-artifact 4 → 8
• build(deps): bump actions/configure-pages from 5 to 6 #87 — actions/configure-pages 5 → 6
• build(deps): bump actions/upload-pages-artifact from 3 to 5 #88 — actions/upload-pages-artifact 3 → 5
• build(deps): bump actions/setup-python from 5 to 7 #89 — actions/setup-python 5 → 7
• build(deps): bump ignore from 0.4.32 to 0.4.33 #92 — ignore lockfile update (the committed diff resolves 0.4.26 → 0.4.32 despite the PR title saying 0.4.33)
• build(deps): bump globset from 0.4.18 to 0.4.20 #93 — globset 0.4.18 → 0.4.20
• build(deps): bump serde_json from 1.0.150 to 1.0.151 #94 — serde_json 1.0.150 → 1.0.151
• build(deps-dev): bump @typescript-eslint/parser from 8.60.1 to 8.68.0 in /extension #95 — @typescript-eslint/parser 8.60.1 → 8.68.0
• build(deps-dev): bump globals from 15.15.0 to 17.11.0 in /extension #96 — globals 15.15.0 → 17.11.0
• build(deps-dev): bump typescript-eslint from 8.60.1 to 8.68.0 in /extension #97 — typescript-eslint 8.60.1 → 8.68.0
• build(deps-dev): bump @vscode/test-electron from 2.5.2 to 3.1.0 in /extension #98 — @vscode/test-electron 2.5.2 → 3.1.0

Excluded because their required aggregate checks are red:

• build(deps): bump schemars from 0.8.22 to 1.2.2 #90 — schemars 1.2.2
• build(deps): bump fancy-regex from 0.14.0 to 0.19.0 #91 — fancy-regex 0.19.0

The source PRs will remain open until this combined PR is merged, then they will be closed as superseded.

Validation:

• repository pre-commit hooks on all changed files
• cargo test --workspace
• npm ci (0 vulnerabilities)
• npm test (66 tests)
• npm run compile

Note: the repository has no ESLint 9 flat config; CI currently runs npx eslint src || true, so direct npm run lint reports that existing configuration gap without gating CI.