Refresh dependencies, CI, and Siftable contracts

[Tom-R-Main]

Summary

• update MCP, Siftable, and pg dependencies and add complete package metadata
• move lean CI to Node 22/24 with current GitHub-maintained actions
• update public docs to prefer the Siftable name and URL while retaining legacy paths for compatibility
• align work claims/transitions with lease-owner contracts and redact claim tokens
• remove the obsolete plaintext Vault read tool now absent from the governed SDK

Verification

• TypeScript typecheck
• existing tool suite (39 tests)
• framework suite (75 tests)
• parallel adapter suite (10 tests)
• new Siftable provider contract suite (4 tests)

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 36e8694ac9

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Pin the CI actions to released major versions

In the checked CI workflow, neither actions/checkout nor actions/setup-node publishes a v7 tag—their upstream tag lists currently stop at v6 (checkout tags, setup-node tags). Consequently, every push and pull-request job fails while resolving the first action and never reaches dependency installation, type checking, or tests; pin both steps to existing releases or immutable commit SHAs.

Useful? React with 👍 / 👎.