deps(app): bump the minor-and-patch group with 31 updates

Dependabot monthly pass (#1350). 31 minor+patch npm updates grouped. Gates: npm ci+build OK (tsc+vite), eslint 0 errors (8 pre-existing warnings), full Go suite 48/48 with the rebuilt dist embedded.

Author: dependabot[bot]