chore(deps): clear high-severity dependency baseline

[technowizard]

Summary

Updates vulnerable dependencies, replaces the unmaintained private-ip package, and makes the CI dependency audit blocking.

Changes

• Bumped:
  • drizzle-orm to 0.45.2
  • Hono catalog version to 4.12.32
  • AWS SDK S3 packages
  • Tailwind Vite and Vite
  • TanStack Router packages
• Moved shadcn to devDependencies.
• Refreshed the lockfile without adding dependency overrides.
• Replaced private-ip with ipaddr.js.
• Preserved explicit SSRF protections, including hexadecimal IPv4-mapped IPv6 addresses.
• Added SSRF regression coverage for private, loopback, link-local, multicast, CGNAT, unique-local, and public addresses.
• Changed the CI dependency audit from report-only to blocking.

Verification

• pnpm audit --prod --audit-level=high — 0 high, 0 critical
• pnpm lint
• pnpm typecheck
• pnpm --filter server test — 42 files, 302 tests
• pnpm --filter web test — 31 files, 141 tests
• pnpm build
• pnpm --filter server db:generate — no schema changes
• Docker Compose startup and migrations verified successfully