build(deps): complete compatible ESLint 10 security update

[craigrallen]

Replaces #12 with a coherent grouped security/tooling update.

The original Dependabot branch advanced ESLint to 10 while leaving eslint-plugin-react-hooks at 7.0.1, so a clean npm ci failed on its ESLint peer range. This replacement keeps the dependency-only scope and updates the compatible direct toolchain together:

• ESLint 10.8.1
• @eslint/js 10.0.1
• typescript-eslint 8.66.0
• eslint-plugin-react-hooks 7.1.1
• transitive brace-expansion 5.0.9

No source, workflow, documentation, or configuration files are changed.

Validation before push:

• npm ci
• npm run lint
• npm run build
• dependency tree sanity check
• npm audit
• git diff --check

The remaining audit findings are pre-existing transitive findings outside this PR's bounded scope.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
somatic-debt	Ready	Preview	Aug 8, 2026 1:36pm

[craigrallen]

Validation evidence for exact head d3f329eaf95e5a86a070ef268b3c32184ba74bd7 against base 24f75ecf0dd1f797b337120189fab78e9bdff680:

• Hostinger VPS, Docker Node 24.19.0 / npm 11.17.0
• Actual merge result created cleanly
• Changed files limited to package.json and package-lock.json
• git diff --check passed
• npm ci passed with no peer-resolution errors
• npm run lint passed
• npm run build passed
• Dependency tree is coherent: ESLint 10.8.1, @eslint/js 10.0.1, typescript-eslint 8.66.0, eslint-plugin-react-hooks 7.1.1, and one brace-expansion 5.0.9
• Audit improved from 5 findings on current main (1 low, 1 moderate, 3 high) to 2 (1 low, 1 high); the ESLint-chain ajv, js-yaml, and brace-expansion findings are removed
• Hosted PR CI passed its install/lint/build job
• Vercel preview deployment completed
• Independent Claude Code review returned BLOCKER=no

The remaining @babel/core and nanoid audit findings are pre-existing and outside this bounded replacement PR.