chore: update monorepo dependencies and remediate Dependabot/npm audit alerts

[Copilot]

This PR updates workspace and template dependencies to current releases to clear Dependabot-style package alerts across the monorepo. It also refreshes lockfile resolution and addresses upgrade-driven lint breakages without changing runtime behavior.

• Security-driven dependency upgrades

  • Bumped direct dependencies in packages/shardwire, packages/react, packages/create-shardwire, and apps/website.
  • Included vulnerable/high-signal packages called out by audit (notably ws, next, mermaid) and aligned related type/tooling packages.

• Scaffold template parity

  • Updated dependency versions in create-shardwire templates (express-server, react-vite) so newly generated projects inherit patched/current versions.

• Lockfile + transitive remediation

  • Regenerated the root package-lock.json and applied automatic transitive fixes via audit to reduce downstream vulnerability surface.

• Post-upgrade code hygiene

  • Accepted lint-driven cleanup in packages/shardwire source/tests (removal of unnecessary type assertions) required by newer typescript-eslint behavior; no feature logic changes intended.

// Example of security-relevant version bumps
{
  "next": "^16.2.6",
  "mermaid": "^11.15.0",
  "ws": "^8.20.1"
}