Combine all open dependency bumps into single PR

Combines the following Dependabot PRs:
- #4236: Bump System.Formats.Asn1 (10.0.2→10.0.3) and System.Security.Cryptography.Pkcs (10.0.2→10.0.3)
- #4237: Bump System.Security.Cryptography.ProtectedData (8.0.0→10.0.3)
- #4238: Bump System.ServiceProcess.ServiceController (8.0.1→10.0.3)
- #4239: Bump System.Text.Encoding.CodePages (8.0.0→10.0.3)
- #4240: Bump System.Threading.Channels (8.0.0→10.0.3)
- #4229: Bump @actions/glob (0.4.0→0.6.1)
- #4231: Bump @typescript-eslint/parser (8.47.0→8.54.0)
- #4300: Bump lint-staged (15.5.0→16.4.0)
- #4313: Bump picomatch (4.0.3→4.0.4, 2.3.1→2.3.2)

Also fixes the NU1605 package downgrade errors from PRs #4237, #4239, #4240
by bumping matching versions in Runner.Common, Runner.Worker, and Runner.Listener.

Author: Copilot