#70 chore: update actions and dependencies

Summary

• Update non-TypeScript dependencies to their latest releases and refresh the Bun lockfile.
• Pin the newer setup-node and Changesets actions to their release SHAs; the other workflow actions were already current.
• Move the Bun version to 1.4.3 and fix the Ultracite regex warning.
• Include a patch changeset.

Checks

• bun run check
• bun run typecheck
• bun run test
• bun run build
• bun run knip
• bun outdated (no outdated dependencies)

---

Summary by cubic

Updates all non-TypeScript dependencies and GitHub Actions to their latest releases, bumps Bun to 1.4.3, and includes a patch changeset.

Implementation Notes

• Pins actions/setup-node and changesets/action to their release SHAs; other workflow actions were already current.
• Moves effect from 4.0.0-rc.117 to the stable 4.0.2.
• Replaces the regex-based trailing-slash strip in src/codex/client.ts with a loop, resolving the Ultracite regex warning.