chore: run npm audit fix across all extensions and bump versions

[cabljac]

Summary

• Consolidates ~50 open dependabot PRs into a single npm audit fix pass across all extensions (excluding storage-reverse-image-search)
• Bumps patch version in extension.yaml and CHANGELOG.md for all 16 affected extensions
• Unpublished intermediate versions (e.g. firestore-multimodal-genai 1.0.6, firestore-incremental-capture 0.0.12, firestore-semantic-search 0.1.10, storage-transcode-videos 0.0.2–0.0.5) are folded into the new version entry

Version bumps

Extension	Old	New
bigquery-firestore-export	0.2.2	0.2.3
firestore-genai-chatbot	0.0.19	0.0.20
firestore-incremental-capture	0.0.12	0.0.13
firestore-multimodal-genai	1.0.6	1.0.7
firestore-palm-chatbot	0.1.11	0.1.12
firestore-palm-gen-text	0.1.11	0.1.12
firestore-palm-summarize-text	0.1.12	0.1.13
firestore-semantic-search	0.1.10	0.1.11
firestore-vector-search	0.1.3	0.1.4
palm-secure-backend	0.1.6	0.1.7
speech-to-text	0.1.9	0.1.10
storage-extract-image-text	0.1.9	0.1.10
storage-label-images	0.1.10	0.1.11
storage-label-videos	0.1.6	0.1.7
storage-transcode-videos	0.0.5	0.0.6
text-to-speech	0.1.9	0.1.10

Closes dependabot PRs

Supersedes: #978 #974 #973 #972 #971 #969 #968 #967 #965 #964 #963 #962 #961 #960 #958 #957 #955 #954 #952 #951 #949 #948 #944 #943 #942 #941 #940 #939 #938 #937 #935 #932 #918 #914 #912 #910 #909 #908 #906 #896 #869 #868 #867 #866 #865 #864

[cabljac]

Obsolete: PaLM extensions (firestore-palm-chatbot, firestore-palm-gen-text, firestore-palm-summarize-text, palm-secure-backend) were removed in commit 9e7b722, so this PR can no longer be rebased. Remaining extension bumps have been superseded piecemeal by dependabot merges and commits like d148877 / fd102f7.