fix(tooling): require patched Node.js security releases (#415)

* fix(tooling): require patched Node.js security releases

Pin development and CI/build tooling to the October 2026 security releases.
Cloudflare Workers runtime and dependency versions are unchanged.

Signed-off-by: Codex <codex@openai.com>

* fix(deps): patch security scan findings and align Wrangler types

---------

Signed-off-by: Codex <codex@openai.com>

.github/workflows/security-extra.yml

@@ -64,7 +64,7 @@ jobs:
       - name: Setup Node.js
         uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
-          node-version: 22
+          node-version: "22.23.4"
 
       - name: Run pnpm audit
         shell: bash

.github/workflows/sync-global-domains.yml

@@ -23,7 +23,7 @@ jobs:
 
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
         with:
-          node-version: 22
+          node-version: "22.23.4"
 
       - name: Sync generated Bitwarden domains
         env: