chore(deps)!: squash dependency updates

[aabmass]

BREAKING CHANGE: Node.js 14 and 16 are no longer supported.

Squashed Renovate PRs:

• chore(deps): update dependency tmp to v0.2.6 [security] - autoclosed #332
• chore(deps): update dependency protobufjs-cli to v1.3.2 [security] - autoclosed #330
• fix(deps): update dependency protobufjs to ~7.6.0 [security] - autoclosed #328
• chore(deps): update debian docker tag to bullseye-20260623 - autoclosed #325
• chore(deps): update debian docker tag to v13 - autoclosed #317
• chore(deps): update dependency @types/sinon to v21 - autoclosed #322
• chore(deps): update dependency mocha to v11 - autoclosed #319
• chore(deps): update dependency linkinator to v7 - autoclosed #318
• chore(deps): update golang docker tag to v1.26 - autoclosed #316
• chore(deps): update dependency @types/pretty-ms to v5 - autoclosed #289

Excluded:

• fix(deps): update dependency p-limit to v7 #326 (because versions >= 4.0.0 are ESM-only, causing runtime errors in this CommonJS codebase)

Dropping Support:

• Node.js 14 and 16 are no longer supported because of upstream dependency requirements. The CI workflow is updated to test on Node 18, 20, and 22.

Fixes:

• Fix JIT inlining issues on Node 22 by wrapping setTimeout callbacks in named functions (busyLoopTick) so V8 attributes samples to our own script instead of (anonymous) or node:internal/timers.
• Update line number regex in system tests to make it robust to JIT compiler line-attributions.
• FixesNode 21+ support - system test failing #283

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 38.58%. Comparing base (dead429) to head (82a5268).
⚠️ Report is 13 commits behind head on main.

Additional details and impacted files

@@ Coverage Diff @@## main #333 +/- ##
==========================================
- Coverage 41.92% 38.58% -3.34% 
==========================================
Files 14 14 Lines 2092 2340 +248 Branches 42 42 ==========================================
+ Hits 877 903 +26 - Misses 1197 1419 +222 
Partials 18 18 

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[aabmass]

I'm going to remove mapbox dep first.

[aabmass]

Allowlist configurations in js-green-licenses.json were added because the tool flags valid, permissive licenses like BlueOak-1.0.0 (used by minipass) as failures due to its hardcoded default list. These are existing transitive dev dependencies (e.g., from glob), not new ones.