chore(deps): consolidated npm + cargo minor-patch bumps (supersedes #926, #927)

[Salem874]

Summary

Consolidates #926 (npm minor-patch, 12 updates) and #927 (cargo minor-patch, 2 updates) into a single PR to avoid the race condition where two dependabot PRs land on main close in time and one triggers the release pipeline before the other settles.

Dependency bumps

npm (12 updates, via PR #926)

Package	From	To
@sentry/browser	10.56.0	10.57.0
lucide-react	1.17.0	1.18.0
@tailwindcss/postcss	4.3.0	4.3.1
@tailwindcss/typography	0.5.19	0.5.20
@typescript-eslint/eslint-plugin	8.60.1	8.61.0
@typescript-eslint/parser	8.60.1	8.61.0
eslint	10.4.1	10.5.0
eslint-plugin-react-refresh	0.5.2	0.5.3
prettier	3.8.3	3.8.4
sharp	0.34.5	0.35.1
tailwindcss	4.3.0	4.3.1

cargo (2 updates, via PR #927)

Crate	From	To
uuid	1.23.2	1.23.3
regex	1.12.3	1.12.4

Verification

• npm install — clean
• cargo check --manifest-path src-tauri/Cargo.toml --lib — clean
• npm run lint — clean
• Vitest — 489 / 489 passed

Test plan

• CI passes on the consolidated branch (this PR)
• No release-pipeline race triggered (the consolidation is what addresses this)
• Close chore(deps): bump the npm-minor-patch group with 12 updates #926 and chore(deps): bump the cargo-minor-patch group in /src-tauri with 2 updates #927 as superseded by this PR on merge

[github-actions]

PR Security Checks

✅ No heuristic or consistency findings on this PR.
_{Generated by .github/workflows/pr-security.yml. Non-blocking — the merge gate is ci.yml. Cross-source checks live in tools/audit-checks/ and run locally. False positives are expected.}