Patch release for jellyctrl. Adds repeatable npm publishing with audit and package payload checks. Updates dependency locks so full npm audit is clean. Keeps the existing jellyctrl and compatibility entrypoints intact.