chore(deps): apply conservative subset of upstream PR #227

Merge upstream dependabot PR #227 as-is breaks the build: pi-coding-agent
0.73.1 introduces API changes (ModelRegistry, event types, typebox imports)
and invalidates the @mariozechner/pi-ai@0.60.0 patch.

Bump the non-breaking production dependencies from #227 while keeping
@mariozechner/pi-ai and @mariozechner/pi-coding-agent at 0.60.0 until the
patch and agent-runner are updated for 0.73.x.

Verified: lint, tsc --noEmit, test:coverage (952 tests).

Author: cursoragent