operators/claude: npm audit fix hono (clears the 4 moderate dependabot advisories)

hono <=4.12.20 (transitive via @modelcontextprotocol/sdk) carried 4 moderate advisories (IPv6 deny bypass / Set-Cookie injection / JWT scheme acceptance / mount-prefix routing). The operator uses the stdio MCP transport, so none are on a live code path, but npm audit fix applies a clean semver-compatible bump: 1 package changed, 0 vulnerabilities. Verified: operators/claude typecheck + 296 e2e green with the updated lockfile.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: Battam1111