Upgrade to Node 24 and add min-release-age

[judeallred]

Summary

• Upgrades Node.js requirement to 24.14.1+ (active LTS)
• Adds min-release-age=1 to .npmrc, telling npm to only resolve package versions published more than 1 day ago
• Supply-chain-attack mitigation: malicious packages are typically flagged within hours, so a 1-day quarantine avoids installing freshly-published compromised versions
• Node 24 ships npm 11.10+, which is required for the min-release-age feature

Test plan

• CI passes with Node 24
• npm install works correctly
• npm ci works correctly
• Application builds and runs successfully

Made with Cursor

[judeallred]

Note: Pre-existing CI failure (unrelated to this PR)

The macOS build jobs fail during the post-job cleanup step — apple-actions/import-codesign-certs tries to delete signing_temp.keychain which doesn't exist, producing exit code 50. The actual macOS builds succeed; only the cleanup step errors.

This is a repo-level infrastructure issue that predates this PR (the Node 24 upgrade + .npmrc changes don't touch signing or macOS config). Guidance from a repository maintainer is needed to proceed — either fix the keychain cleanup separately or confirm this PR can be merged despite the pre-existing failure.

See SEC-1019 for full context on this effort.