chore(deps): batch-update npm and server deps from Dependabot PRs

Absorbs Dependabot PRs #837, #838, #840, #842-#847, #849-#851, #857 via a
single lockfile refresh plus happy-dom direct bump and black major bump.

- happy-dom ^20.0.11 -> ^20.8.9
- npm update: rollup 4.54->4.60, undici, picomatch, flatted, preact, qs,
  lodash, immutable, basic-ftp, minimatch, editorconfig, plus patch bumps
  to vue, vuetify, vite, vitest, aws-sdk, sentry, etc.
- server: black ^23.1.0 -> ^26.3.1, aiohttp 3.13.5 (reformatted examples)
- Pin @wdio/visual-service to exact 9.0.2: the 9.2.x element-screenshot
  regression captures a black canvas for layers-and-rendering.e2e.ts.

Author: PaulHax