chore(deps): upgrade the JS CQL translator @cqframework/cql 4.0.0-beta.1 → 5.2.0

[Taleef7]

The JS translator jumped from 4.0.0-beta.1 (Sept 2025) to a released 5.2.0 (2026-08-19), now tracking the Java translator version line — we are a full major behind, and 31 of the ADR-060 "invalid-accepted" findings are plausibly translator-side.

• Upgrade; re-run the 1,835-case conformance suite (ADR-060 harness) as the regression gate and diff the report
• Re-verify compile-measures output is byte-identical (or document the delta)
• Check whether the ADR-064 UCUM wiring shape changed (LibraryManager fourth-argument trap)

Deliberately scheduled AFTER Connectathon prep (post-September) — the parity submissions should be made on the pinned toolchain we have measured. Context: docs/JOURNAL.md 2026-08-24.

[Taleef7]

Relevant measurement while preparing upstream issue cqframework/clinical_quality_language#1831: the ReproMin/ReproProbe choice-of-profiles constructs fail identically on 5.2.0 — so this upgrade, whenever taken, does not unblock CMS138/CMS951 USQC translation. Also noted for the upgrade itself: the 5.2.0 createModelInfoProvider callback signature is (name, ?, version) and model-info dependency loading is stricter about required models (USQC's model info declares USCore as required; failing to supply it surfaces as Could not load model information).