chore: adopt hardened TS Stack releases

[ty-everett]

Summary

• adopt the fully merged TS Stack hardening from fix(express): share host runtime across framework extensions bsv-blockchain/ts-stack#420
• resolve the server graph to Auth Express 2.1.7, Payment Express 2.1.5 where used, SDK 2.2.17, and Wallet Toolbox 2.4.20
• refresh the exact npm lockfile and remove high/critical production audit findings
• include any source compatibility adjustment required by the final packages

Evidence

• upstream release: https://github.com/bsv-blockchain/ts-stack/actions/runs/30674167938
• clean npm ci --ignore-scripts: passed
• dependency graph/version audit: passed
• production audit: zero high and zero critical findings
• local validation: npm run lint, typecheck, tests, and build

This PR is intentionally limited to the dependency closure affected by the TS Stack/AuthSocket hardening rollout.