Restore required Web lint gate by resolving production dependency advisories

[federicodeponte]

Problem

The required Web lint check on current main fails in the npm audit --omit=dev --audit-level=high step before PR-specific web validation can complete.

Current audit output reports high-severity advisories affecting:

• next 16.2.6
• postcss <= 8.5.17
• sharp < 0.35.0
• fast-uri 3.0.0-3.1.3
• brace-expansion <= 5.0.7
• transitive Hono packages

The audit recommends Next 16.2.12 and related lockfile updates. This is reproducible on the unchanged origin/main dependency graph.

Impact

Every otherwise-valid PR is blocked by the required Web lint status. The security advisories also remain unresolved on the default branch.

Acceptance

• Upgrade or override affected production dependencies using supported versions.
• Run the full web test, lint, build, and production-only audit gates.
• Keep the lockfile deterministic.
• Confirm the required Web lint check passes on a no-op PR from the repaired main.