chore: Bump axios from 1.16.0 to 1.18.1

[ernst-dev]

Bumps axios from 1.16.0 to 1.18.1 to address multiple security vulnerabilities.

Lockfile-only change (transitive dependency; package-lock.json only). axios 1.18.x adds https-proxy-agent, so its agent-base/https-proxy-agent subtree entries are added.

Severity	Advisory	Summary
High	GHSA-gcfj-64vw-6mp9	Node HTTP adapter can use an inherited proxy after interceptor config cloning
Medium	GHSA-jqh4-m9w3-8hp9	Fetch adapter ReadableStream uploads bypass maxBodyLength
Medium	GHSA-mwf2-3pr3-8698	HTTP/2 streamed uploads bypass maxBodyLength
Medium	GHSA-hcpx-6fm6-wx23	Form serializer maxDepth bypass via {} metatoken
Medium	GHSA-f4gw-2p7v-4548	NO_PROXY bypass for 0.0.0.0 local addresses
Medium	GHSA-xj6q-8x83-jv6g	Prototype pollution auth subfields can inject Basic auth

• Vulnerable versions: < 1.18.0 — Patched: 1.18.0 (bumped to 1.18.1)

Opened by roko-dependabot-handler on behalf of @ernst-dev to remediate Dependabot alerts that had no auto-generated fix.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (main@f11ebeb). Learn more about missing BASE report.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #194   +/-   ##
=======================================
  Coverage        ?   97.11%           
=======================================
  Files           ?       55           
  Lines           ?     1420           
  Branches        ?      251           
=======================================
  Hits            ?     1379           
  Misses          ?       35           
  Partials        ?        6           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.