fix(deps): Bump nested @hono/node-server to 1.19.17 in website server

Resolves Dependabot alert #361. The direct dependency is already on
2.x; the vulnerable 1.19.14 sat nested under @modelcontextprotocol/sdk,
which accepts ^1.19.9, so only the lockfile entry moves.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>