chore: update dependencies, Node.js, pnpm, and GitHub Actions (#17711)

* chore: update dependencies, Node.js, pnpm, and GitHub Actions

* chore: regenerate the embedded ESM loader for enhanced-resolve 5.26.1

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* style: format Cargo.toml with taplo

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: adapt to sysinfo 0.40 and sigstore-sign 0.15, keep rusqlite at 0.39

- sysinfo 0.40 returns a Result from the System constructors.
- sigstore-sign 0.15 made SigningContext::production() fetch the signing
  config through TUF. Use the embedded public-good config, which is what
  production() returned before, and convert the new MediaType enum.
- rusqlite 0.41 (libsqlite3-sys 0.39) bundles a SQLite whose symbols
  collide with libsql-ffi's copy when both link into one binary, so stay on
  0.39 until that is sorted out.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* chore: hold rusqlite at 0.39 in update.ignoreDeps

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix: adapt the Windows kernel version probe to sysinfo 0.40

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* style: format the Windows kernel version probe

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

.github/workflows/codeql-analysis.yml

@@ -52,7 +52,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+      uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -63,7 +63,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+      uses: github/codeql-action/autobuild@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -77,4 +77,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
+      uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2