bump deps and lock exact version (#77)

Author: huozhi

.npmrc

@@ -0,0 +1 @@
+save-exact=true

package.json

@@ -33,10 +33,10 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "1.20.0",
-    "find-process": "^2.0.0",
-    "pid-port": "^2.0.0",
-    "xmcp": "^0.3.5",
-    "zod": "^3.25.76"
+    "find-process": "2.0.0",
+    "pid-port": "2.0.0",
+    "xmcp": "0.4.0",
+    "zod": "3.25.76"
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.1.15",