fix(deps): bump axios to 1.18.1 to fix prototype pollution advisory

[LeoFalco]

Summary

Bumps axios from 1.16.0 to 1.18.1, resolving the open Dependabot security alerts (#98 manifest, #99 lockfile).

• Advisory: Axios prototype pollution — auth subfields can inject Basic auth
• Severity: medium
• Vulnerable range: >= 1.15.2, < 1.18.0
• Patched: 1.18.0 (using latest 1.18.1)

Changes

• package.json: axios 1.16.0 -> 1.18.1
• package-lock.json: regenerated

Verification

• npm install clean
• npx eslint . passes (exit 0)

Note: npm audit still reports two moderate transitive findings (ajv, brace-expansion) under eslint dev deps. These are not in the Dependabot alert list and are out of scope for this fix.

🤖 Generated with Claude Code