Update @malloydata packages to 0.0.420 (#249)

* Update @malloydata packages to 0.0.420; externalize pg-native

@malloydata/db-postgres pins pg to exact 8.7.3, whose lib/native/client.js
does a bare `require('pg-native')` that esbuild cannot resolve (pg-native is
an optional native client, not installed). Newer pg wraps that require in a
try/catch esbuild treats as optional, but the pin holds the pre-guard version.
Mark pg-native external (as the vscode extension already does) so esbuild
leaves the lazy require for runtime. Upstream context: malloydata/malloy#2928.

* ci: read Node version from .node-version instead of floating 24.x

CI set `node-version: 24.x` / '24', ignoring the committed .node-version
(24.16.0), so it ran Node 24.17+ whose http.Agent keep-alive regression makes
Google OAuth fail with "Premature close" — flaking the live BigQuery tests.
Point setup-node at .node-version (test + publish workflows) so CI honors the
pin. Mirrors malloydata/malloy#2949.

Author: mtoy-googly-moogly

.github/workflows/npm-publish.yml

@@ -29,7 +29,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: '24'
+          node-version-file: '.node-version'
       - name: Upgrade npm for trusted publishing (OIDC)
         run: npm install -g npm@latest
 
@@ -98,7 +98,7 @@ jobs:
 
       - uses: actions/setup-node@v6
         with:
-          node-version: '24'
+          node-version-file: '.node-version'
       - name: Upgrade npm for trusted publishing (OIDC)
         run: npm install -g npm@latest
 

.github/workflows/test.yaml

@@ -30,7 +30,7 @@ jobs:
       - name: Use Node.js
         uses: actions/setup-node@v6
         with:
-          node-version: 24.x
+          node-version-file: '.node-version'
       - name: Install
         run: npm ci --loglevel error
       - name: Build and Test