[Chore] Replace vulnerable Storybook image parser

[roomote-roomote]

​Created by Roomote. View the task or mention @roomote-roomote for follow-up asks.

What changed

• Replace image-size@2.0.2 only on Storybook's Next.js Vite plugin path with probe-image-size@7.3.0.
• Patch the plugin's ESM and CommonJS bundles to use the replacement's synchronous parser and fail closed for unsupported images.

Why this change was made

Dependabot alerts #96 and #97 cover infinite-loop denial of service flaws in image-size's JXL, HEIF, and ICNS parsers. Upstream has not published a patched image-size release, so this removes the vulnerable package from the lockfile without broadening the dependency update.

Impact

There is no intended product runtime change. Storybook keeps synchronous image metadata handling through a parser that rejects the published malformed ICNS and HEIF payloads promptly, and the repository's dependency minimum-age policy remains unchanged. Frozen installation, lint, type checking, the complete web client test suite, Knip, and dependency audit pass. The Storybook build still encounters its existing vfile/node:url browser-externalization failure after transforming the application modules; the replacement parser itself is exercised successfully with a repository PNG and the advisory payloads.

[roomote-community]

No code issues found. See task

_{Reviewed d5e930b}