chore: align Cloudflare toolchain and fix advisories

[important-new]

Summary

• Align Wrangler, Workers Types, Vite plugin, and Vitest pool Workers versions with the compatible Cloudflare toolchain.
• Update vulnerable dependencies, including the MCP SDK and proxy-addr, while preserving MCP runtime dependencies.
• Replace the Wrangler 4.129 patch-package diff with a version- and source-guarded postinstall compatibility patch for Wrangler 4.147.0. Keep the push gate read-only and verify the targeted castErrorCause2 behavior.
• Preserve Linux platform entries and normalize lockfile tarball URLs to registry.npmjs.org.

The compatibility patch remains necessary for the second serialized-error conversion path; this PR does not claim workers-sdk#15317 is fully resolved upstream.

Verification

• npm run type-check
• npm run lint:advisories -- --registry=https://registry.npmjs.org
• npm run lint:wrangler-patch
• OpenInspection pre-commit checks
• Cross-app toolchain parity check