chore(deps): update Electron to 44.9.0 with verified runtime contract

CHANGELOG.md

@@ -14,6 +14,11 @@ exhaustive.
 
 Planned version: **1.5.2**.
 
+### Changed
+
+- Desktop runtime updated to Electron 44.9.0 (embedded Node 24.22.0), with matching
+  manifest, lockfile and runtime contract pins.
+
 ### Added
 
 - XML and JSON queries can read files and evaluate XPath/JSONPath on a WinRM target, including

src/nodepilot-desktop/package.json

@@ -26,7 +26,7 @@
   },
   "dependencies": {},
   "//types-node": [
-    "Electron 44.7.0 bundles Node 24.x. @types/node may be newer for tooling, so",
+    "Electron 44.9.0 bundles Node 24.22.0. @types/node may be newer for tooling, so",
     "runtime-only APIs must still be checked against the embedded Node release."
   ],
   "//archive-security": [
@@ -48,7 +48,7 @@
     "@electron/fuses": "2.1.3",
     "@electron/packager": "20.3.0",
     "@types/node": "^26.6.5",
-    "electron": "44.7.0",
+    "electron": "44.9.0",
     "typescript": "~6.0.2",
     "vitest": "^4.1.11"
   }

src/nodepilot-desktop/src/package-contract.test.ts

@@ -24,13 +24,13 @@ function readJson<T>(relativePath: string): T {
 }
 
 describe('desktop runtime dependency contract', () => {
-  it('pins Electron 44.7.0 consistently in the manifest and lockfile', () => {
+  it('pins Electron 44.9.0 consistently in the manifest and lockfile', () => {
     const manifest = readJson<PackageManifest>('../package.json');
     const lock = readJson<PackageLock>('../package-lock.json');
 
-    expect(manifest.devDependencies.electron).toBe('44.7.0');
-    expect(lock.packages[''].devDependencies?.electron).toBe('44.7.0');
-    expect(lock.packages['node_modules/electron'].version).toBe('44.7.0');
+    expect(manifest.devDependencies.electron).toBe('44.9.0');
+    expect(lock.packages[''].devDependencies?.electron).toBe('44.9.0');
+    expect(lock.packages['node_modules/electron'].version).toBe('44.9.0');
   });
 
   // The embedded Node major changes with Electron majors. Naming the pinned version in the note