Bumps [serialize-javascript](https://github.com/yahoo/serialize-javascript) to 7.1.1 and updates ancestor dependency [mocha](https://github.com/mochajs/mocha). These dependencies need to be updated together.


Updates `serialize-javascript` from 6.0.2 to 7.1.1
- [Release notes](https://github.com/yahoo/serialize-javascript/releases)
- [Commits](yahoo/serialize-javascript@v6.0.2...v7.1.1)

Updates `mocha` from 11.8.0 to 12.0.0
- [Release notes](https://github.com/mochajs/mocha/releases)
- [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md)
- [Commits](mochajs/mocha@v11.8.0...v12.0.0)

---
updated-dependencies:
- dependency-name: serialize-javascript
  dependency-version: 7.1.1
  dependency-type: indirect
- dependency-name: mocha
  dependency-version: 12.0.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>

publish.yml never ran tsc-prod, and dist/ is gitignored with publish
using --ignore-scripts, so every release since the TypeScript migration
shipped without .d.ts files. Add tsc + tsc-prod (and attw) before publish.

test.yml: bump checkout/setup-node to v4, add a 22.x/24.x matrix, enable
npm caching, set contents:read, and replace `npm it` with explicit
tsc / tsc-prod / test / attw steps so CI type-checks and validates the
published types.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

The main ruleset requires a status check named exactly 'build'. Adding the
Node version matrix renamed the jobs to 'build (22.x)' / 'build (24.x)', so
no check named 'build' was ever reported and the PR stayed blocked on
'Expected — Waiting for status to be reported'. Rename the matrix job to
'test' and add an aggregate 'build' job gated on it.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>