Update client for current BeatAPI capabilities

[erickkkyt]

Summary

• sync the current 30-operation BeatAPI OpenAPI contract
• add typed client support for text-model discovery, Responses, image/video generation, Effects, and video analysis
• preserve OpenAI-compatible raw response shapes for text calls
• validate custom API origins and require explicit trust for non-official HTTPS origins
• update transitive dependencies to clear the current npm audit findings

Verification

• npm run verify
• npm audit: 0 vulnerabilities