align tooling with ts-lib-starter

[mrhyde]

Catches onvif up to the template baseline. Everything here is a version bump plus one gap in the check script.

• @2bad/tsconfig 3.0.2 to 4.0.0 and typescript 6.0.3 to 7.0.2, the two Renovate cannot land on its own.
• @2bad/axiom 2.0.0 to 2.1.0, @types/node 25.9.5 to 26.1.2, oxlint 1.75.0 to 1.76.0, oxfmt 0.60.0 to 0.61.0, npm-run-all2 8.0.4 to 9.0.3.
• pnpm 11.17.0 to 11.18.0, volta node to 26.5.1, matching the template.
• tsconfig.json swaps baseUrl for the template's types and paths setup.
• pnpm-workspace.yaml excludes @2bad/* from the release age gate so our own packages install immediately.

check was missing check:types, so nothing was type-checking this repo: tsdown emits declarations without a full check and CI only ran oxlint and oxfmt. Adding it surfaced five errors, all in onvif.integration.test.ts and all pre-existing:

• three index-signature accesses on process.env, now bracketed
• username and password were passed through as possibly undefined, which exactOptionalPropertyTypes rejects, so they are now spread in only when set
• getStreamUri returns MediaUri | string and the test destructured uri off it unconditionally

Build is clean with attw and publint. Unit tests pass. The integration suite still skips itself unless ONVIF_TEST_HOST is set, so it stays skipped in CI.

Branch protection currently requires collect coverage on top of the three baseline contexts, which no other repo requires. Switching it to match the baseline once this is green.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 2.50%. Comparing base (a253cf0) to head (ab67d64).

Additional details and impacted files

@@          Coverage Diff           @@
##           master     #30   +/-   ##
======================================
  Coverage    2.50%   2.50%           
======================================
  Files           8       8           
  Lines         639     639           
  Branches      221     221           
======================================
  Hits           16      16           
  Misses        514     514           
  Partials      109     109           

Flag	Coverage Δ
unit	2.50% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.