chore(deps): bump node from 24-bookworm-slim to 26-bookworm-slim in the docker-images group

[dependabot]

Bumps the docker-images group with 1 update: node.

Updates node from 24-bookworm-slim to 26-bookworm-slim

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

CI triage

CI failed on this PR. Automated classification of the 4 failed job(s):

• Build — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
• Static PR checks — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
• Container images / build-and-verify — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.
• PR required — needs investigation: inspect the failing step and uploaded diagnostics; rerun only after classifying the cause.

Compared with main CI run #9629 (cancelled).

Classification is evidence routing, not permission to ignore a failure. Exact quarantined Playwright identities remain governed by the flake ledger.

[cursor]

Babysit summary

• Tip: 670bd6cc493626607529c11a6e43619fbd6469d4
• Sync/merge-tree: clean vs main (behind only because other merges advanced base)
• Blocked by: Container images / PR required — Docker build uses node:26-bookworm-slim but repo engines pin node: ">=24.15.0 <25" (engine-strict). CI fails with EBADENGINE (Actual node v26.7.0).
• Action: No code push. This Dependabot group bump is incompatible with the intentional Node 24 pin; rewriting engines to accept Node 26 is out of scope for unblock.
• Recommended disposition: close this PR (or have Dependabot retarget to a Node 24.x patch only). Do not merge.
• Required CI: red (expected)
• Residual risks: none if closed; merging would break installs/runtime gates
• Merge: left unmerged on purpose

[cursor]

Babysit / unblock disposition — do not merge

• Tip: 670bd6cc49 (Dependabot Node 26 docker images group)
• Sync / merge-tree: BEHIND vs main; not synced — bump is incompatible with repo engines Node >=24.15.0 <25
• Blocked by: required CI red (Container images / build-and-verify, PR required) — EBADENGINE / Node 26 vs pinned Node 24
• Fixed / dispositioned: none; recommend close/reject this Dependabot PR rather than forcing engines or syncing
• Required CI: failed on tip; will remain red without a policy change to allow Node 26
• Residual risks: merging would break install/runtime gates that enforce Node 24
• Merge: left unmerged on purpose

Operator: close #1796 (or retarget Dependabot to stay on Node 24.x) when convenient.

[BigSimmo]

Unblock snapshot (2026-08-10): PR head is 7939149. I synced origin/main into this PR (commit 7939149) to clear stale/behind state, then re-checked mergeability. Current state is merge-tree clean, mergeable=true, mergeStateStatus=BEHIND, required workflows passing (Gitleaks + PR policy). No unresolved blocker threads or mergeability blockers remain; only normal behind-state lag. Merge left to you.