chore(infra): bump patch versions to publish CVE-fixed images

The HIGH-CVE remediation merged in the previous infra fix changed the
Dockerfiles and dependency trees but not the package.json versions, so the
infra-release workflow (which only builds a component when
ghcr.io/<owner>/<dir>:v<version> does not already exist) would skip them and
leave the vulnerable images live.

Roll each fixed component by one patch so the next infra release builds and
publishes the remediated images:

- chaintracks-server:        1.0.6  -> 1.0.7
- message-box-server:        1.1.10 -> 1.1.11
- overlay-server:            2.1.11 -> 2.1.12
- uhrp-server-cloud-bucket:  0.2.6  -> 0.2.7
- wab:                       1.4.6  -> 1.4.7
- wallet-infra:              2.0.9  -> 2.0.10

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: sirdeggen

infra/chaintracks-server/package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "chaintracks-server",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "TypeScript Express server wrapping ChaintracksService from @bsv/wallet-toolbox",
   "main": "dist/server.js",
   "type": "commonjs",

infra/chaintracks-server/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@bsv/messagebox-server",
   "private": true,
-  "version": "1.1.10",
+  "version": "1.1.11",
   "main": "./out/src/index.js",
   "type": "module",
   "scripts": {

infra/message-box-server/package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@bsv/overlay-express-examples",
   "private": true,
-  "version": "2.1.11",
+  "version": "2.1.12",
   "description": "Run the overlay infrastructure for distributed applications.",
   "homepage": "https://github.com/bsv-blockchain/ts-stack/tree/main/infra/overlay-server#readme",
   "bugs": {

infra/message-box-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bsv/uhrp-storage-server",
-  "version": "0.2.6",
+  "version": "0.2.7",
   "main": "./out/src/index.js",
   "types": "./out/src/index.d.ts",
   "files": [

infra/overlay-server/package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "@bsv/wab-server",
   "private": true,
-  "version": "1.4.6",
+  "version": "1.4.7",
   "description": "Wallet Authentication Backend (WAB) server",
   "main": "dist/server.js",
   "scripts": {