Bump eca-webview and mirror Global Config editor deps

The webview now embeds a CodeMirror-powered Global Config editor
(new Settings → Global Config tab) and requires six @codemirror/*
packages plus jsonc-parser for JSONC validation. Because the web
client compiles the webview sources inline (via the `@webview`
Vite alias + tsconfig `include`), those deps must also be present
in eca-web's own package.json for Vite/Rollup to resolve them at
build time — otherwise the build fails with "Rollup failed to
resolve import @codemirror/state".

Submodule bump brings in Hero-mode polish, live server-startup
progress, MCP add/remove, and the Settings tabs scaffolding
(Logs + Global Config). The web-side IPC handlers for the new
global-config / logs messages are added in a follow-up commit.

Author: ericdallo