chore(release): v0.118.0

[ralyodio]

Version bump for v0.118.0: moshcode work links every package's node_modules into attempt worktrees, so pnpm monorepo package tests run in them (#579).

🤖 Generated with Claude Code

[github-actions]

ThreatCrush Security Scan

0 finding(s) in the 1 file(s) this pull request changes.

Nothing in the files this pull request changes.

106 pre-existing finding(s) elsewhere in the repository — **HIGH/CRITICAL**: 8 | **MEDIUM**: 87 | **LOW**: 11

Not introduced by this pull request. The full set is in the Security tab.

Severity	Rule	Location
HIGH	js-ssrf-outbound-request	apps/pwa/public/sw.js:76
HIGH	tls-verification-disabled	apps/pwa/src/lib/moshpit-gateway.mjs:299
HIGH	sh-remote-script-execution	install.sh:86
HIGH	sh-remote-script-execution	install.sh:90
HIGH	sh-remote-script-execution	install.sh:258
HIGH	sh-remote-script-execution	install.sh:269
HIGH	sh-remote-script-execution	install.sh:275
HIGH	tls-verification-disabled	src/dns.mjs:766
MEDIUM	js-unescaped-html-sink	apps/pwa/public/herd/herd.js:117
MEDIUM	sql-template-interpolation	apps/pwa/src/lib/moshpit-certs.mjs:44
MEDIUM	sql-template-interpolation	apps/pwa/src/lib/moshpit-certs.mjs:82
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:139
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:153
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:179
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:373
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:377
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:422
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:674
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:870
MEDIUM	sql-template-interpolation	apps/pwa/src/moshpit.mjs:872

…and 86 more. Full results in the Security tab.

Snippets are redacted; ThreatCrush never prints matched credential material.