fix(deps): resolve all open Dependabot alerts

[devin-ai-integration]

Summary

Closes all open Dependabot alerts (high: #2, #4, #5, #12, #13, #15-#18; moderate: #3, #6-#11; low: #1). All affected packages are transitive, so this adds an overrides block to pnpm-workspace.yaml:

fast-uri   3.1.3  -> 3.1.6
ip-address 10.2.0 -> 10.3.1
js-yaml    4.3.0  -> 4.3.2
undici     7.28.0 -> 7.29.0
postcss    8.5.19 -> 8.5.23
esbuild    0.27.7 -> 0.28.1

pnpm lint, pnpm typecheck, pnpm test (255 tests) and pnpm build pass; lockfile passes the existing supply-chain policy.

Link to Devin session: https://app.devin.ai/sessions/1af64696671b47e1a74a14c4d5f1d4d6
Open in Devin Desktop: https://app.devin.ai/desktop/session/1af64696671b47e1a74a14c4d5f1d4d6?variant=devin
Requested by: @szymonrybczak

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment, CI, and merge conflict monitoring