chore(deps): bulk in-range upgrade of 14 deps (no CVEs, routine maintenance)

Bumps 12 direct dependencies and 2 existing resolutions to their latest
within-major releases. No CVE alerts attached to any of these — purely
keeping the lock current against published patch / minor releases.

Direct dependencies (package.json#dependencies):

  @susisu/mte-kernel      ^2.0.0  → ^2.1.1   (table editor, renderer)
  codemirror-mode-elixir  ^1.1.1  → ^1.1.2   (HTML <script>, renderer)
  flowchart.js            ^1.6.5  → ^1.18.0  (diagrams, renderer)
  i18n-2                  ^0.7.2  → ^0.7.3   (i18n, main + renderer)
  jsonlint-mod            ^1.7.4  → ^1.7.6   (JSON lint, renderer)
  markdown-it-footnote    ^3.0.0  → ^3.0.3   (md plugin, renderer)
  markdown-it-plantuml    ^1.1.0  → ^1.4.1   (md plugin, renderer)
  raphael                 ^2.2.7  → ^2.3.0   (SVG, renderer via flowchart.js)
  react-autosuggest       ^9.4.0  → ^9.4.3   (UI, renderer)
  react-debounce-render   ^4.0.1  → ^4.0.3   (UI, renderer)
  react-emoji-render      ^1.1.0  → ^1.2.4   (emoji, renderer)
  typo-js                 ^1.0.3  → ^1.3.2   (spell-check, renderer)

Resolutions (package.json#resolutions, existing entries):

  brace-expansion         ^1.1.13 → ^1.1.15  (build-time)
  tmp                     ^0.2.4  → ^0.2.6   (build-time)

All bumps are within the existing major version, so the caret semantics
already permitted the new patches — the floor bump just nudges yarn to
re-resolve. Largest jumps are flowchart.js 1.6 → 1.18 (12 minors),
typo-js 1.0 → 1.3 (3 minors), and markdown-it-plantuml 1.1 → 1.4
(3 minors).

CLAUDE.md "Build-time only" group updated to reflect the new
brace-expansion + tmp floor versions.

Verified inside bn-deps image:
  yarn install --ignore-engines --force
  → 14 ranges re-resolved to new floors
  npm run compile
  → 9.28 MB / 1220 modules (+0.07 MB / +3 modules vs 9.21 / 1217;
    expected from flowchart.js + typo-js + react-emoji-render minor
    growth, bundle hash changed accordingly)

Author: Evaggelos Balaskas