Align repo config with global development standards

- Add missing tsconfig strictness flags (noUncheckedIndexedAccess,
  exactOptionalPropertyTypes, noImplicitOverride,
  noPropertyAccessFromIndexSignature) and fix all resulting type errors
- Replace ESLint/Prettier with oxlint 1.48.0 and oxfmt 0.33.0
- Pin all frontend and backend dependencies to exact versions
- Pin GitHub Actions to SHA hashes with persist-credentials: false
- Fix CI Python version mismatch (3.12 -> 3.14) and ruff target-version
- Add vitest 4.0.18 with jsdom environment for frontend testing
- Add ty 0.0.17 for Python type checking (non-blocking in CI)
- Add actionlint and zizmor CI job for workflow linting and security audit
- Add Dependabot config for npm, pip, and github-actions
- Update CLAUDE.md and pre-commit hooks to reflect new tooling
- Ignore Claude Code sandbox artifacts in gitignore

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

frontend/src/components/PokemonCard.tsx

@@ -1,26 +1,14 @@
 import type { EncounterDetail } from '../types'
 import { TypeBadge } from './TypeBadge'
 
-interface PokemonCardProps {
+export interface PokemonCardProps {
   encounter: EncounterDetail
-  showFaintLevel?: boolean
-  onClick?: () => void
+  showFaintLevel?: boolean | undefined
+  onClick?: (() => void) | undefined
 }
 
-export function PokemonCard({
-  encounter,
-  showFaintLevel,
-  onClick,
-}: PokemonCardProps) {
-  const {
-    pokemon,
-    currentPokemon,
-    route,
-    nickname,
-    catchLevel,
-    faintLevel,
-    deathCause,
-  } = encounter
+export function PokemonCard({ encounter, showFaintLevel, onClick }: PokemonCardProps) {
+  const { pokemon, currentPokemon, route, nickname, catchLevel, faintLevel, deathCause } = encounter
   const isDead = faintLevel !== null
   const displayPokemon = currentPokemon ?? pokemon
   const isEvolved = currentPokemon !== null
@@ -33,14 +21,10 @@ export function PokemonCard({
       } ${onClick ? 'cursor-pointer hover:ring-2 hover:ring-blue-400 transition-shadow' : ''}`}
     >
       {displayPokemon.spriteUrl ? (
-        <img
-          src={displayPokemon.spriteUrl}
-          alt={displayPokemon.name}
-          className="w-25 h-25"
-        />
+        <img src={displayPokemon.spriteUrl} alt={displayPokemon.name} className="w-25 h-25" />
       ) : (
         <div className="w-25 h-25 rounded-full bg-gray-300 dark:bg-gray-600 flex items-center justify-center text-xl font-bold text-gray-600 dark:text-gray-300">
-          {displayPokemon.name[0].toUpperCase()}
+          {displayPokemon.name[0]?.toUpperCase()}
         </div>
       )}
 
@@ -53,9 +37,7 @@ export function PokemonCard({
         </span>
       </div>
       {nickname && (
-        <div className="text-xs text-gray-500 dark:text-gray-400">
-          {displayPokemon.name}
-        </div>
+        <div className="text-xs text-gray-500 dark:text-gray-400">{displayPokemon.name}</div>
       )}
 
       <div className="flex flex-col items-center gap-0.5 mt-1">
@@ -70,9 +52,7 @@ export function PokemonCard({
           : `Lv. ${catchLevel ?? '?'}`}
       </div>
 
-      <div className="text-xs text-gray-400 dark:text-gray-500 mt-0.5">
-        {route.name}
-      </div>
+      <div className="text-xs text-gray-400 dark:text-gray-500 mt-0.5">{route.name}</div>
 
       {isEvolved && (
         <div className="text-[10px] text-gray-400 dark:text-gray-500 mt-0.5">