chore: Bump axios from 1.16.0 to 1.18.1

[ernst-dev]

Bumps axios from 1.16.0 to 1.18.1 to address multiple security vulnerabilities.

This is a lockfile-only change (transitive dependency; package-lock.json only).

Vulnerabilities addressed

Severity	Advisory	Summary
High	GHSA-gcfj-64vw-6mp9	Node HTTP adapter can use an inherited proxy after interceptor config cloning
Medium	GHSA-7q8q-rj6j-mhjq	Nested axios option objects can consume polluted prototype values
Medium	GHSA-mmx7-hfxf-jppx	Prototype pollution gadgets can alter axios request construction
Medium	GHSA-f4gw-2p7v-4548	NO_PROXY bypass for 0.0.0.0 local addresses
Medium	GHSA-xj6q-8x83-jv6g	Prototype pollution auth subfields can inject Basic auth

• Vulnerable versions: < 1.18.0
• Patched version: 1.18.0 (bumped to 1.18.1)

Lockfile regenerated with the repo's scripts/clean-package-lock.js post-processing so only the axios subtree changes.

Opened by roko-dependabot-handler on behalf of @ernst-dev to remediate a Dependabot alert that had no auto-generated fix.