Align repo config with global development standards

- Add missing tsconfig strictness flags (noUncheckedIndexedAccess,
  exactOptionalPropertyTypes, noImplicitOverride,
  noPropertyAccessFromIndexSignature) and fix all resulting type errors
- Replace ESLint/Prettier with oxlint 1.48.0 and oxfmt 0.33.0
- Pin all frontend and backend dependencies to exact versions
- Pin GitHub Actions to SHA hashes with persist-credentials: false
- Fix CI Python version mismatch (3.12 -> 3.14) and ruff target-version
- Add vitest 4.0.18 with jsdom environment for frontend testing
- Add ty 0.0.17 for Python type checking (non-blocking in CI)
- Add actionlint and zizmor CI job for workflow linting and security audit
- Add Dependabot config for npm, pip, and github-actions
- Update CLAUDE.md and pre-commit hooks to reflect new tooling
- Ignore Claude Code sandbox artifacts in gitignore

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

frontend/src/pages/admin/AdminRouteDetail.tsx

@@ -46,8 +46,7 @@ export function AdminRouteDetail() {
   )
   const currentIndex = sortedRoutes.findIndex((r) => r.id === rId)
   const route = currentIndex >= 0 ? sortedRoutes[currentIndex] : undefined
-  const prevRoute =
-    currentIndex > 0 ? sortedRoutes[currentIndex - 1] : undefined
+  const prevRoute = currentIndex > 0 ? sortedRoutes[currentIndex - 1] : undefined
   const nextRoute =
     currentIndex >= 0 && currentIndex < sortedRoutes.length - 1
       ? sortedRoutes[currentIndex + 1]
@@ -55,9 +54,7 @@ export function AdminRouteDetail() {
 
   const childRoutes = useMemo(
     () =>
-      (game?.routes ?? [])
-        .filter((r) => r.parentRouteId === rId)
-        .sort((a, b) => a.order - b.order),
+      (game?.routes ?? []).filter((r) => r.parentRouteId === rId).sort((a, b) => a.order - b.order),
     [game?.routes, rId]
   )
 
@@ -72,11 +69,7 @@ export function AdminRouteDetail() {
       accessor: (e) => (
         <div className="flex items-center gap-2">
           {e.pokemon.spriteUrl ? (
-            <img
-              src={e.pokemon.spriteUrl}
-              alt={e.pokemon.name}
-              className="w-6 h-6"
-            />
+            <img src={e.pokemon.spriteUrl} alt={e.pokemon.name} className="w-6 h-6" />
           ) : null}
           <span>
             #{e.pokemon.nationalDex} {e.pokemon.name}
@@ -89,9 +82,7 @@ export function AdminRouteDetail() {
     {
       header: 'Levels',
       accessor: (e) =>
-        e.minLevel === e.maxLevel
-          ? `Lv ${e.minLevel}`
-          : `Lv ${e.minLevel}-${e.maxLevel}`,
+        e.minLevel === e.maxLevel ? `Lv ${e.minLevel}` : `Lv ${e.minLevel}-${e.maxLevel}`,
     },
   ]
 
@@ -109,9 +100,7 @@ export function AdminRouteDetail() {
         <select
           className="text-gray-900 dark:text-gray-100 bg-transparent font-medium cursor-pointer hover:underline border-none p-0 text-sm"
           value={rId}
-          onChange={(e) =>
-            navigate(`/admin/games/${gId}/routes/${e.target.value}`)
-          }
+          onChange={(e) => navigate(`/admin/games/${gId}/routes/${e.target.value}`)}
         >
           {sortedRoutes.map((r) => (
             <option key={r.id} value={r.id}>
@@ -175,12 +164,9 @@ export function AdminRouteDetail() {
       {showCreate && (
         <RouteEncounterFormModal
           onSubmit={(data) =>
-            addEncounter.mutate(
-              { ...data, gameId: gId } as CreateRouteEncounterInput,
-              {
-                onSuccess: () => setShowCreate(false),
-              }
-            )
+            addEncounter.mutate({ ...data, gameId: gId } as CreateRouteEncounterInput, {
+              onSuccess: () => setShowCreate(false),
+            })
           }
           onClose={() => setShowCreate(false)}
           isSubmitting={addEncounter.isPending}
@@ -213,9 +199,7 @@ export function AdminRouteDetail() {
       {/* Sub-areas */}
       <div className="mt-8">
         <div className="flex justify-between items-center mb-3">
-          <h3 className="text-lg font-semibold">
-            Sub-areas ({childRoutes.length})
-          </h3>
+          <h3 className="text-lg font-semibold">Sub-areas ({childRoutes.length})</h3>
           <button
             onClick={() => setShowCreateChild(true)}
             className="px-3 py-1.5 text-sm font-medium rounded-md bg-blue-600 text-white hover:bg-blue-700"
@@ -224,16 +208,11 @@ export function AdminRouteDetail() {
           </button>
         </div>
         {childRoutes.length === 0 ? (
-          <p className="text-sm text-gray-500 dark:text-gray-400">
-            No sub-areas for this route.
-          </p>
+          <p className="text-sm text-gray-500 dark:text-gray-400">No sub-areas for this route.</p>
         ) : (
           <div className="border rounded-md dark:border-gray-700 divide-y dark:divide-gray-700">
             {childRoutes.map((child) => (
-              <div
-                key={child.id}
-                className="flex items-center justify-between px-4 py-2"
-              >
+              <div key={child.id} className="flex items-center justify-between px-4 py-2">
                 <Link
                   to={`/admin/games/${gId}/routes/${child.id}`}
                   className="text-blue-600 dark:text-blue-400 hover:underline"
@@ -256,10 +235,9 @@ export function AdminRouteDetail() {
         <RouteFormModal
           nextOrder={nextChildOrder}
           onSubmit={(data) =>
-            createRoute.mutate(
-              { ...data, parentRouteId: rId } as CreateRouteInput,
-              { onSuccess: () => setShowCreateChild(false) }
-            )
+            createRoute.mutate({ ...data, parentRouteId: rId } as CreateRouteInput, {
+              onSuccess: () => setShowCreateChild(false),
+            })
           }
           onClose={() => setShowCreateChild(false)}
           isSubmitting={createRoute.isPending}