bump js-component-bindgen to 1.18 and transient deps

[chaynabors]

Exploratory, not for merge.

Incompatibilities needing resolution upstream:

• jco: RenderIntrinsicsArgs fields pub(crate), no constructor
• jco: FunctionBindgen requires &CanonicalOptions (post-compile state); splicer runs at WIT-resolution time
• jco: ResourceExtraData::Stream/Future requires table indices and PayloadTypeMetadata (pub(crate)) generated from post-compile types
• wirm: CustomSections::delete removed, no replacement
• wirm: 4.0.0 is the only version compatible with jco 1.18's wasmparser pin; 4.0.1+ moves to wasmparser 0.247