fix(pi): update test host and audit development dependencies

Author: Coding-Dev-Tools

.github/workflows/ci.yml

@@ -241,7 +241,7 @@ jobs:
           npm ci --ignore-scripts
           npm run verify
           npm run test:integration
-          npm audit --omit=dev
+          npm audit
 
   browser-accessibility:
     name: browser accessibility smoke

CHANGELOG.md

@@ -5,6 +5,8 @@ All notable changes to Engraphis are documented here. Format loosely follows
 
 ## [Unreleased]
 
+- Updated the Pi test host to 0.87.1 to include the patched WebSocket client, and
+  extended the Pi dependency audit to cover its development dependencies.
 - Updated the Pi extension's locked `ip-address` dependency to 10.5.1, fixing
   IPv6 link-local and NAT64 classification advisories without changing its dependency ranges.
 - Hardened the experimental Cloud decision client with validated destinations,

integrations/pi/README.md

@@ -40,7 +40,7 @@ When published, install the Pi package:
 pi install npm:@engraphis/pi
 ```
 
-The extension is tested with Pi 0.83.x, Node 22.19 or later, and Engraphis
+The extension is tested with Pi 0.87.1, Node 22.19 or later, and Engraphis
 1.5.x. Pi supplies its own Pi and TypeBox runtime modules, following Pi's package
 contract; the extension checks the required Smart MCP tool names when it opens
 the local server and reports an actionable compatibility error if they are absent.