fix(deps): patch security vulns and rebuild claude-code bundles

- Pin pygments>=2.20.0 to fix CVE-2026-4539 (ReDoS in AdlLexer)
- Override happy-dom>=20.8.9 in landingpage to fix fetch credentials vuln
- Rebuild claude-code plugin bundles after @acontext/acontext 0.1.19 bump

Author: GenerQAQ

landingpage/package.json

@@ -93,7 +93,8 @@
       "minimatch@>=8.0.0 <10.2.3": "10.2.3",
       "picomatch@<4": ">=2.3.2",
       "flatted": ">=3.4.2",
-      "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0"
+      "path-to-regexp@>=8.0.0 <8.4.0": ">=8.4.0",
+      "happy-dom": ">=20.8.9"
     }
   },
   "cloudflare": {