uSync 17.5.0 and 18.2.0 released

Repo: KevinJump/uSync

uSync: merged the outstanding dependabot PRs (eslint, dompurify) into v17/main, then merged v17/main into the v17/17.5.0 release branch and the release branch back into v17/main
uSync: the 10 open dompurify security alerts all come in through @umbraco-cms/backoffice (dev-only, kept out of the bundle). The dompurify bumps cleared one; the rest are monaco-editor's pinned copy, so they're Umbraco's to fix
uSync: tested a local 17.5.0 build on test sites running Umbraco 17.3.0, 17.7.1 and 17.8.0-rc. All three imported the seed cleanly, and 17.8 logs the server role as Single at startup where earlier versions say Unknown
Released uSync 17.5.0 to NuGet, with the v17.5.0 GitHub release (Umbraco 17.8 readiness)
uSync: forward-ported v17/main into v18/main (#1142, 15 commits): kept v18's Umbraco/@jumoo pins and dependency list, took the newer version of each shared package, regenerated the lock files. Merged with a merge commit so the next forward port can use the shared history
uSync: dependabot on v18 now only holds back TypeScript 7 (v18's clients are already on TS 6)
Released uSync 18.2.0 to NuGet, with the v18.2.0 GitHub release (SignalR reconnect, server role logging, ImportSingle swagger cleanup, local link / URL alias / import order fixes)