build(deps): combine all open Dependabot dependency updates

[pmishchenko-ua]

Summary

This PR gathers all 23 open Dependabot dependency-update PRs into a single branch for combined review. Each Dependabot branch was merged into cursor/combine-dependabot-updates-ce4c (branched off master), and the merge conflicts (all in website/package-lock.json) were resolved by keeping the highest / intended version.

Only lockfiles are affected, plus a single direct dev-dependency bump in website/package.json (tsx, from PR #42). No application source code changes.

Included Dependabot PRs

Root project (package-lock.json)

PR	Package	Version
#27	flatted (dev)	3.2.7 → 3.4.2
#31	picomatch	2.3.1 → 2.3.2
#33	lodash (dev)	4.17.23 → 4.18.1
#46	js-yaml (dev)	4.1.1 → 4.3.0

Website (website/package-lock.json, website/package.json)

PR	Package	Version
#28	node-forge	1.3.2 → 1.4.0
#29	path-to-regexp	0.1.12 → 0.1.13
#30	picomatch	2.3.1 → 2.3.2
#32	lodash	4.17.21 → 4.18.1
#34	brace-expansion	1.1.12 → 1.1.14
#35	follow-redirects	1.15.11 → 1.16.0
#37	@babel/plugin-transform-modules-systemjs	7.28.5 → 7.29.4
#42	esbuild & tsx	esbuild → 0.28.1, tsx → 4.22.4
#43	launch-editor	2.12.0 → 2.14.1
#45	ws	→ 8.21.0
#48	websocket-driver	0.7.4 → 0.7.5
#49	immutable	5.1.2 → 5.1.9
#50	svgo	3.3.2 → 3.3.4
#52	shell-quote	1.8.x → 1.10.0
#53	webpack-dev-server	5.2.4 → 5.2.6
#54	body-parser	1.20.5 → 1.20.6
#55	postcss	8.5.6 → 8.5.25
#56	undici	7.18.2 → 7.29.0
#57	fast-uri	3.0.6 → 3.1.5

Verification

• Both lockfiles are valid JSON with no leftover merge-conflict markers.
• npm ci passes in the root project (353 packages) — confirms package-lock.json is in sync with package.json.
• npm ci passes in website/ (1335 packages) — confirms website/package-lock.json is in sync with website/package.json.
• All targeted versions verified present in the final lockfiles.

Notes for reviewers

• This combined PR does not close the individual Dependabot PRs automatically; once this is merged, the superseded Dependabot PRs can be closed.
• A full website production build was not run here; CI should exercise the build. The dependency changes are limited to version bumps validated by npm ci.