chore(deps): typescript 7, mocha 12, vsce 4, @types/node 22 for all plugins

[dubadub]

Combined replacement for the Dependabot major-bump PRs (one lockfile regeneration per package).

• typescript ~5.4.5 -> ~7.0.2 (no code changes needed; tsc, esbuild webview bundles still work)
• mocha ^10 -> ^12.0.2
• @vscode/vsce ^3 -> ^4.0.0 (needs Node >= 22; CI uses 22)
• @types/node ^18 -> ^22.20.4 (NOT 26: matches the Node 22 shipped with the VS Code/Electron extension host)
• meal-journal: npm audit fix (qs advisory)
• dependabot.yml: ignore @types/node majors and @types/vscode major/minor (must not exceed engines.vscode)

Supersedes the Dependabot PRs #15-#40.