Update dependencies for v0.18.1

[shinpr]

Summary

• Bump mcp-local-rag and the MCP server manifest to 0.18.1.
• Update Mammoth to 1.12.2 for safer handling of untrusted DOCX style data.
• Update the pinned Node.js runtime to 22.23.2 and pnpm to 11.24.0.
• Update Biome, Knip, and lint-staged to their latest compatible releases.

Verification

• corepack pnpm test src/parser/__tests__/docx-parser.test.ts (20 tests)
• corepack pnpm run check:all (82 files, 1,384 tests)
• Packed-package installation and production dependency smoke test

Known upstream advisories

The audit still reports two high-severity transitive advisories through the latest published Hugging Face Transformers.js and LanceDB packages:

• adm-zip below 0.6.0
• sharp below 0.35.0

No compatible parent-package updates are currently available. The upstream dependency updates are being tracked in:

• deps: bump onnxruntime-node and sharp huggingface/transformers.js#1731
• fix(node): resolve remaining pnpm audit findings lancedb/lancedb#4073