chore: bump version to v2.1.0 and fix trivy vulnerabilities

Bump version to 2.1.0 for GHCR release. Fix all 17 Trivy HIGH/CRITICAL
findings via npm overrides:

- @xmldom/xmldom: ^0.9.10 (CVE-2026-34601, CVE-2026-41672-41675)
- protobufjs: ^7.5.5 (CVE-2026-41242, CRITICAL)
- basic-ftp: ^5.3.0 (CVE-2026-39983, GHSA-6v7q, GHSA-rp42)
- lodash: ^4.18.0 (CVE-2026-4800)

WAL-803

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: pranavjain97