fix(deps): remove junk "23" dependency (#154)

"23": "^0.0.0" is not a real dependency - it is an empty placeholder
package (0.0.0, no deps, unrelated third-party maintainer) that landed
here from a stray npm install. Nothing in the package references it.

Beyond the noise, it is a small supply-chain liability: a dependency on
a squatted single-number name owned by nobody we know, shipped to every
consumer of speech-utils.

Lint passes; full test suite passes 105/105 with live vendor credentials.

Co-authored-by: Claude Opus 5 <noreply@anthropic.com>

package-lock.json

@@ -9,7 +9,6 @@
       "version": "1.0.14",
       "license": "MIT",
       "dependencies": {
-        "23": "^0.0.0",
         "@aws-sdk/client-polly": "^3.496.0",
         "@aws-sdk/client-sts": "^3.496.0",
         "@cartesia/cartesia-js": "^2.2.7",
@@ -2444,12 +2443,6 @@
         "node": ">=22.0.0"
       }
     },
-    "node_modules/23": {
-      "version": "0.0.0",
-      "resolved": "https://registry.npmjs.org/23/-/23-0.0.0.tgz",
-      "integrity": "sha512-uAETf9Okr72trtp1pNXYKhFCTTI1EKGcYMA8gw3jLGhlbaDX+grrNToEWrpt8luxRAvrZWBTvyB5wk3PpNjGQQ==",
-      "license": "ISC"
-    },
     "node_modules/abort-controller": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/abort-controller/-/abort-controller-3.0.0.tgz",
@@ -7367,11 +7360,6 @@
     }
   },
   "dependencies": {
-    "23": {
-      "version": "0.0.0",
-      "resolved": "https://registry.npmjs.org/23/-/23-0.0.0.tgz",
-      "integrity": "sha512-uAETf9Okr72trtp1pNXYKhFCTTI1EKGcYMA8gw3jLGhlbaDX+grrNToEWrpt8luxRAvrZWBTvyB5wk3PpNjGQQ=="
-    },
     "@aashutoshrathi/word-wrap": {
       "version": "1.2.6",
       "resolved": "https://registry.npmjs.org/@aashutoshrathi/word-wrap/-/word-wrap-1.2.6.tgz",

package.json

@@ -25,7 +25,6 @@
   },
   "homepage": "https://github.com/jambonz/speech-utils#readme",
   "dependencies": {
-    "23": "^0.0.0",
     "@aws-sdk/client-polly": "^3.496.0",
     "@aws-sdk/client-sts": "^3.496.0",
     "@cartesia/cartesia-js": "^2.2.7",