Maintain dependencies, CI coverage, and Codex model compatibility

[hyspacex]

The locked example-app dependencies had six npm audit findings, and CI did not typecheck or build that app. Update the affected dependencies, adapt MapLibre 6 imports and worker bundling, align the Node engine requirement, and run app checks alongside harness tests on Node 20.19.0, 22.12.0, and 24.

Replace the Codex default gpt-5.5 ahead of its October 14 retirement with gpt-6.1-sol, the upgrade target advertised by the installed app-server. Keep the active, verified claude-opus-4-7 default. Document that the Claude integration uses the npm Agent SDK's bundled runtime, not the global Claude executable. Existing explicit config selections are preserved.

Validation:

• Clean npm install, zero npm audit findings, harness build, 57 tests, example app typecheck and production build.
• Development and production map rendered in a browser; layer toggle worked and production console had zero errors.
• Real harness run minimal-mode tasks through both codex app-server 0.159.3 / gpt-6.1-sol and Claude Agent SDK 0.1.77 / claude-opus-4-7: generation, smoke tests, independent evaluation, evidence artifacts, and final regression all passed; no repair was required.
• Codex also accepted unchanged xhigh effort and fast service tier in a live request.
• Original local checkout and its 29 unpublished commits were not included.

No package version bump, package publication, or new release. The existing v0.5.0 tag causes the release workflow to skip publishing.