chore: bump fontless to 0.4.1 (lightningcss CSS transform, --font-* auto-detect)

Bump the pnpm catalog (catalogMode is strict, so the range lives in the
catalog, not in package.json): prod catalog fontless ^0.2.1 -> ^0.4.1.
Consumed only by apps/console (fontless: catalog:prod). Transitive:
fontaine 0.8.0 -> 0.8.1, unifont 0.7.4 -> 0.8.3. Already on Vite 8.

Config unchanged: apps/console/vite.config.ts keeps its explicit Geist /
Geist Mono families on provider "fontsource" (a fontless provider string,
not the npm package).

Added fontless to minimumReleaseAgeExclude, matching this repo's existing
pattern for brand-new releases wanted now (eslint/svelte/knip): fontless
0.4.1 published <1 day ago, so the supply-chain age gate would otherwise
reject the lockfile in CI.

Verified: apps/console build succeeds; built client CSS emits 48 @font-face
rules and 40 woff2 files under build/client/assets/_fonts/ (fontsource
provider works on unifont 0.8.3).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016FzHBHu2PuQwFbbY2zDe4C

Author: returnsvoidjanet