fix(deps): take the fixes for sharp and shell-quote that turn main's OSV scan red

sharp GHSA-wq5f-xc86-pv6w (fixed 0.35.5): lift the existing override's
target from ^0.35.4 to ^0.35.5; the <0.36.0 selector already sits at the
0.x caret boundary. next@16.3.6's optional ^0.35.4 admits it, so this is a
dedupe onto the patched line.

shell-quote GHSA-pqg4-j6r4-53mv (fixed 1.11.0): a new override
'shell-quote@>=1.8.4 <2.0.0': '^1.11.0'. The one path is launch-editor
2.14.1 (^1.8.4) <- @changesets/cli 3.0.3, and no release up that path
forces the fix, so no bump can replace the floor.

The lockfile moves only sharp, its @img/sharp-* binaries and shell-quote.

Claude-Session: https://claude.ai/code/session_01VF48aw8RPG6wzDnMgp6rtw
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude