chore(deps): resolve all critical/high Dependabot alerts

[Yeom-JinHo]

What

Clears all critical/high severity Dependabot alerts by refreshing
transitive dependencies within their existing semver ranges, plus a
direct next bump in apps/www.

How

• next: ^15.5.14 → ^15.5.18 (direct)
• Lockfile refresh moved transitive deps to patched versions — no pnpm
  overrides required since parent ranges already permit them:
  protobufjs 7.6.4, hono 4.12.27, @hono/node-server 1.19.14, vite 7.3.6,
  vitest 3.2.6, shell-quote 1.9.0, minimatch 3.1.5/9.0.9/10.2.5,
  picomatch 2.3.2, path-to-regexp 8.4.2, fast-uri 3.1.3, flatted 3.4.2,
  @modelcontextprotocol/sdk 1.29.0

Verification

• pnpm build ✓
• pnpm typecheck ✓
• pnpm audit --audit-level high → 0 critical, 0 high

[vercel]

@Yeom-JinHo is attempting to deploy a commit to the product-studio Team on Vercel.

A member of the Team first needs to authorize it.