chore(deps): upgrade all dependencies; next 16.4.3 (RCE GHSA-2464-fhr4-w9xw) (#338)

@supabase/ssr 0.12, twilio 6, uuid 14, dotenv 18, eslint 10, msw 3, mocha 12,
sinon 22, sharp 0.35, @vitejs/plugin-react 6, jest-dom 7, @profullstack/stack
0.5 / x402-gateway 0.13 / hqtui 0.11, serialize-javascript override 7.1.4,
bun 1.4.4. Drops the duplicate `export { RateLimiter }` that vite 8's parser
rejects. Held: typescript 5.9, vitest 4, jsdom 26.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: ralyodio

Dockerfile

@@ -9,7 +9,7 @@
 # secrets from app.env at run time, keeps the onion keys on the
 # /var/lib/tor/hidden_service volume.
 
-FROM oven/bun:1.4.0-slim AS deps
+FROM oven/bun:1.4.4-slim AS deps
 WORKDIR /app
 COPY package.json bun.lock ./
 RUN bun install --frozen-lockfile
@@ -47,7 +47,7 @@ COPY . .
 # `bun --bun next build` (the build script): Next runs on Bun, not Node.
 RUN bun run build
 
-FROM oven/bun:1.4.0-slim AS runtime
+FROM oven/bun:1.4.4-slim AS runtime
 # tor for the onion service, tini as PID 1.
 RUN apt-get update && apt-get install -y --no-install-recommends \
     tor ca-certificates tini \