chore(deps): update all dependencies to latest

[bryantbiggs]

Bumps to latest including majors.

• @actions/core ^3.0.0 → ^3.0.1
• @aws-sdk/client-s3 ^3.1014.0 → ^3.1058.0
• @aws-sdk/client-signer ^3.1014.0 → ^3.1058.0
• @types/node ^25.5.0 → ^25.9.1
• esbuild ^0.27.4 → ^0.28.0
• eslint ^10.1.0 → ^10.4.1
• typescript ^5.9.3 → ^6.0.3
• typescript-eslint ^8.57.1 → ^8.60.1
• vitest ^4.1.0 → ^4.1.8
• actions/setup-node SHA bump (v6)
• aws-actions/configure-aws-credentials SHA bump (v6)
• orhun/git-cliff-action SHA bump (v4)
• softprops/action-gh-release v2 → v3
• hashicorp/aws provider >= 3.17 → >= 6.0
• terraform-aws-modules/s3-bucket/aws ~> 2.10 → ~> 5.0
• antonbabenko/pre-commit-terraform v1.55.0 → v1.106.0
• pre-commit/pre-commit-hooks v4.0.1 → v6.0.0

aws provider v6 dropped data.aws_region.*.name (renamed to region) and removed aws_s3_bucket_object (replaced by aws_s3_object) — both updated in __infra__/main.tf and __infra__/signing.tf. The stale >= 3.17 baseline-CHANGELOG comment was removed alongside the floor bump. softprops/action-gh-release v3 keeps the tag_name / body / make_latest inputs we use; no schema edits needed. dist/index.js rebuilt to absorb the aws-sdk bumps.

Supersedes #80, #87, #88, #89, #90.