chore(deps-dev): bump @types/node from 22.19.21 to 26.1.0 (#109)

* chore(deps-dev): bump @types/node from 22.19.21 to 26.1.0

Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.21 to 26.1.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

---
updated-dependencies:
- dependency-name: "@types/node"
  dependency-version: 26.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* ci: skip Vercel preview deploy for Dependabot PRs (no secrets access)

Dependabot PRs run from the same repo (not a fork), so the deploy
step's fork-only guard let it through even though GitHub withholds
repository secrets from dependabot-actor runs. That caused
deploy.mjs to fail with 'missing --token'. Treat dependabot[bot]
runs the same as fork PRs: build/lint/typecheck/test still run,
but preview deploy and lighthouse are skipped until a maintainer
adds the 'trusted' label.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Claude <hasparus@gmail.com>
Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Author: 3 people

package.json

@@ -56,7 +56,7 @@
     "@hasparus/eslint-config": "3.0.0",
     "@playwright/test": "1.60.0",
     "@types/hast": "3.0.4",
-    "@types/node": "^22.0.0",
+    "@types/node": "^26.1.0",
     "cssnano": "^7.1.5",
     "eslint": "^10.6.0",
     "eslint-plugin-check-file": "3.3.1",