chore(deps): bump canonicalize from 2.1.0 to 3.0.0 in /packages/client

[dependabot]

Bumps canonicalize from 2.1.0 to 3.0.0.

Release notes

Sourced from canonicalize's releases.

v3.0.0

Breaking changes

• Switched from CommonJS to ES modules — consumers using require() must switch to import or dynamic import()
• Circular references now throw Error('Circular reference detected') instead of causing a stack overflow

Improvements

• Modernized tooling: ESLint flat config, node:test, c8 coverage
• Replaced Travis CI with GitHub Actions (Node 18, 20, 22, 24)
• Added engines field requiring Node >= 18
• Added exports field for proper ESM resolution
• Added files field for leaner published package

Commits

• aba9209 Fix bin field to use object format
• 9d4088f 3.0.0
• 300c0ff Consistency fixes: rename serialize to canonicalize, use expected variables i...
• 5f324be Add global CLI install example to README
• 31119da Update README: fix badges, use ESM imports, fix typo, note TypeScript support
• 84f5e15 Fix circular reference DoS, improve toJSON check, and optimize string building
• b8265b9 Add CLAUDE.md with test convention; apply actual/expected pattern
• ca8546e Improve test setup: grouping, robust paths, coverage, CI matrix
• a0d5db8 Fix node --test glob on Node 18: remove quotes to allow shell expansion
• 08eb823 Fix node --test on Node 22
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)