v0.5.0 — Major deps upgrade

What's Changed

Dependencies

• commander 12.1.0 → 14.0.3
• ora 8.2.0 → 9.3.0
• @types/node 22.19.11 → 25.5.0

CI/CD

• Fixed GitHub Actions: package-lock.json now tracked
• Dropped Node 18 from CI matrix (EOL)
• engines updated to node >=20
• Fixed repository URL for npm provenance
• Added NPM_TOKEN secret for automated publishing

Verification

• 124/124 tests passing
• TypeScript typecheck clean
• 0 npm vulnerabilities