Consolidate dependency updates to latest versions (#818)

Renovate had opened many overlapping/conflicting PRs for individual
package bumps, some of which broke the build. This squashes all of
them into one upgrade: npm deps (TypeScript 6, ESLint 10 with a flat
config migration, Jest 30, Prettier 3, Octokit v22/v8, googleapis 173),
GitHub Actions (ghaction-docker-meta v6, codeql-action v4 digest), and
the Node/Docker base image (24.18.0 LTS), plus the source/test changes
needed to keep the build, lint, and test suite green under the new
majors (ESM-only Octokit via dynamic import, stricter TS6 catch-clause
typing, updated google-auth-library JWT constructor signature).

Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>

Release v1.0.6 - SA-675 Google GitHub sync fixes

- Filter suspended/archived Google users from sync
- Fix exit code logic for successful changes
- Add error handling and surface API errors
- Add Slack notifications for membership changes
- Fix CI permissions for GitHub Packages
- Fix Dockerfile CMD format

update readme and bump versions

description doesn't escape the ${{}}

use prebuilt docker image rather than rebuild every run (#36)

Bump @typescript-eslint/parser from 4.20.0 to 4.21.0 (#19)

Bumps [@typescript-eslint/parser](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/parser) from 4.20.0 to 4.21.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases)
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/master/packages/parser/CHANGELOG.md)
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v4.21.0/packages/parser)

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

fix action branding

add metadata to action