chore(deps): clear the current production audit failures (#97)

Refresh the @modelcontextprotocol/sdk transitive pins flagged by npm audit
(qs, zod, ip-address, express, express-rate-limit, hono, body-parser,
fast-uri, @hono/node-server) and bump MCP SDK to 1.32.2. audit:prod is now
clean.

Co-authored-by: QoderAI (Qwen 3.8 Max) <qoder_ai@qoder.com>

Author: luoxuanzao

package-lock.json

@@ -55,27 +55,30 @@
     "@codemirror/commands": "^6.11.0",
     "@codemirror/state": "^6.5.0",
     "@codemirror/view": "^6.38.6",
-    "@modelcontextprotocol/sdk": "~1.32.1",
+    "@modelcontextprotocol/sdk": "~1.32.2",
     "@qoder-ai/qoder-agent-sdk": "^1.0.58",
     "tslib": "^2.8.1"
   },
   "overrides": {
     "@babel/core": "7.29.7",
-    "@hono/node-server": "2.0.12",
-    "body-parser": "2.3.0",
+    "@hono/node-server": "2.1.5",
+    "body-parser": "2.4.0",
     "brace-expansion": "5.0.9",
     "esbuild": "$esbuild",
-    "fast-uri": "^3.1.8",
-    "hono": "4.13.7",
-    "ip-address": "10.7.2",
+    "express": "5.3.0",
+    "express-rate-limit": "8.7.2",
+    "fast-uri": "^3.1.9",
+    "hono": "4.13.14",
+    "ip-address": "10.7.5",
     "js-yaml": "4.3.0",
     "minimatch": "10.2.5",
-    "qs": "6.16.0",
+    "qs": "6.17.1",
     "test-exclude": {
       "minimatch": {
         ".": "^3.1.2",
         "brace-expansion": "^1.1.12"
       }
-    }
+    },
+    "zod": "4.6.7"
   }
 }