chore(deps): refresh project dependencies

[steipete]

Summary

• refresh all eligible root and admin dependencies under the repository's 48-hour release-age policy
• validate the Cloudflare Workers types 4 to 5 major update through the full Worker and admin build
• remove the high-severity sharp and PostCSS advisories from the resolved tree
• update the four macOS visual baselines for Playwright 1.62 and Chromium 151 rasterization

Proof

• pnpm install --frozen-lockfile
• pnpm check (117 Worker, 26 admin, and 74 script tests passed)
• pnpm build
• pnpm worker:e2e (real local Worker smoke passed)
• pnpm --dir admin test:browser (8 desktop/mobile tests passed, including WCAG checks)
• pnpm audit --audit-level=high (no known vulnerabilities)
• autoreview: clean, no accepted or actionable findings in the manifest and lockfile bundle

Playwright 1.62 required Chromium 151. The first browser run after installing that runtime found only 23 to 32 rasterized pixels changed per full-page snapshot, with functional, focus, and accessibility checks passing. The baselines were regenerated and a second complete browser run passed unchanged.

Deployment status

Not deployed. This is a development dependency and snapshot refresh.

Remaining risk

No known runtime risk. The visual baseline change is limited to Chromium rasterization; no UI source changed.