fix: remediate npm deprecation warnings in @mosaic/gateway 0.0.3

- Upgrade @opentelemetry/auto-instrumentations-node ^0.71.0 → ^0.72.0;
  v0.72.0 drops @opentelemetry/instrumentation-fastify (deprecated in
  favour of @fastify/otel) from its dependency tree, eliminating the
  `npm warn deprecated @opentelemetry/instrumentation-fastify@0.57.0`
  warning on `npm install -g @mosaic/gateway`.

- Bump @mariozechner/pi-ai and @mariozechner/pi-coding-agent ~0.57.1 →
  ^0.65.0.  ModelRegistry constructor became private in 0.65.0; callers
  now use ModelRegistry.inMemory(authStorage) (provider.service.ts and
  provider-adapters.test.ts updated accordingly).  All 347 tests pass.

- prebuild-install@7.1.3 (via better-sqlite3@12.8.0): upstream-blocked.
  better-sqlite3 12.8.0 is the latest release and still ships with
  prebuild-install; no fix available until upstream migrates away.

- node-domexception@1.0.0 (via @google/genai → google-auth-library →
  gaxios@7 → node-fetch@3 → fetch-blob@3 → node-domexception): upstream-
  blocked.  gaxios@7.1.4 (latest) still depends on node-fetch@^3.3.2,
  and all versions of node-domexception carry the `deprecated` registry
  flag; no override can suppress it.  Fix requires gaxios to adopt native
  fetch or node-fetch v4 GA.

Bumps gateway version 0.0.2 → 0.0.3.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

apps/gateway/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mosaic/gateway",
-  "version": "0.0.2",
+  "version": "0.0.3",
   "repository": {
     "type": "git",
     "url": "https://git.mosaicstack.dev/mosaic/mosaic-stack.git",
@@ -28,8 +28,8 @@
   "dependencies": {
     "@anthropic-ai/sdk": "^0.80.0",
     "@fastify/helmet": "^13.0.2",
-    "@mariozechner/pi-ai": "~0.57.1",
-    "@mariozechner/pi-coding-agent": "~0.57.1",
+    "@mariozechner/pi-ai": "^0.65.0",
+    "@mariozechner/pi-coding-agent": "^0.65.0",
     "@modelcontextprotocol/sdk": "^1.27.1",
     "@mosaic/auth": "workspace:^",
     "@mosaic/brain": "workspace:^",
@@ -49,7 +49,7 @@
     "@nestjs/platform-socket.io": "^11.0.0",
     "@nestjs/throttler": "^6.5.0",
     "@nestjs/websockets": "^11.0.0",
-    "@opentelemetry/auto-instrumentations-node": "^0.71.0",
+    "@opentelemetry/auto-instrumentations-node": "^0.72.0",
     "@opentelemetry/exporter-metrics-otlp-http": "^0.213.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.213.0",
     "@opentelemetry/resources": "^2.6.0",

apps/gateway/src/agent/__tests__/provider-adapters.test.ts

@@ -62,7 +62,7 @@ function restoreEnv(saved: Map<EnvKey, string | undefined>): void {
 }
 
 function makeRegistry(): ModelRegistry {
-  return new ModelRegistry(AuthStorage.inMemory());
+  return ModelRegistry.inMemory(AuthStorage.inMemory());
 }
 
 // ---------------------------------------------------------------------------

apps/gateway/src/agent/provider.service.ts

@@ -67,7 +67,7 @@ export class ProviderService implements OnModuleInit, OnModuleDestroy {
 
   async onModuleInit(): Promise<void> {
     const authStorage = AuthStorage.inMemory();
-    this.registry = new ModelRegistry(authStorage);
+    this.registry = ModelRegistry.inMemory(authStorage);
 
     // Build the default set of adapters that rely on the registry
     this.adapters = [