Scope

Refresh the project dependency set and lockfile to bring transitive packages up to date.

Acceptance criteria

• Update dependency versions in priority order.
• Regenerate pnpm-lock.yaml.
• Run build and test checks.
• Open a PR with the dependency refresh.