fix!: require Node.js 22.22 and repair CI - #58

Summary

• Enforce the official npm package's Node.js floor (22.22.0) before delegating through either global npm or npx; document and recommend Node 24 LTS, with tests for missing, broken, older, minimum, and newer runtimes.
• Run Python CI for every PR, require every dependency job to succeed, and exercise the exact minimum and Node 24 on both Linux and Windows. Resolve the published CLI once per run, assert which delegation path is being tested, isolate Windows npm directories, and launch smoke tests through the actual Python console script with isolated settings and outputs.
• Make CI enforce the uv lockfile without changing any dependency version, teach release-please to bump the wrapper's entry in uv.lock, lint both workflows, and let a dedicated release token start eligible pull_request CI automatically. With the default token GitHub requires a maintainer to approve workflow execution; historical manual re-publications preserve their existing lock-repair behavior.

The previous main and release-please dependency PR runs failed in different Windows smoke jobs; their detailed logs have expired. A manual workflow dispatch on the existing release PR confirmed that GitHub runs against its head but excludes those checks from branch protection, as documented in GitHub's required checks troubleshooting guide. This PR therefore uses the standard pull request workflow instead.

Validation

• Ruff lint and format; mypy; pyright; GitHub actionlint 1.7.12
• Unit suite with CI's pinned upstream version in the environment: 214 passed, 10 platform-specific skips on macOS
• Real published [email protected] smoke suite on macOS: 20 passed through a global installation on Node 24; 20 passed through npx on exactly Node 22.22.0
• Real Node 20.20.2 was rejected before promptfoo runs; wheel and sdist built; verified the wheel includes the new runtime module
• Compared all 28 lock records with a fresh resolution through the configured registry: package versions, artifacts/hashes, and dependencies match; tested the exact [email protected] updater against the full lockfile and verified only the root package version changes

Breaking change: the Python wrapper no longer supports Node 20 or Node 22 releases older than 22.22.0, including when an older promptfoo CLI is pinned.