025d453293
Bumps napi 2.16 -> 3.9 and napi-derive 2.16 -> 3.5 (cargo) and @napi-rs/cli 2.18 -> 3.7 (npm). napi 3's derive macros emit #[allow(unsafe_code)], which the workspace-wide forbid(unsafe_code) cannot permit, so the Node crate gets its own [lints] block mirroring the workspace with unsafe_code relaxed to deny — forbid stays in force for every other crate. The CLI-3-regenerated index.d.ts / index.js keep the identical 626-symbol public API (only the codegen format changed). MSRV stays 1.88 (napi 3.9 requires exactly that); ureq is intentionally left at 2.x. Verified locally: cargo clippy clean, 1108/1108 Node tests pass. Supersedes the napi half of the cargo group bump and the @napi-rs/cli npm bump.