deps: clear all open Dependabot alerts

[packetThrower]

Fixes all 17 open Dependabot alerts:

• quinn-proto 0.11.14 → 0.11.17 (Cargo.lock) — remote memory exhaustion (Replatform docs from MkDocs Material to Astro Starlight #27)
• astro ^6.4.6 → ^7.2.7 + @astrojs/starlight ^0.38.4 → ^0.41.9 — XSS fixes (Faster Stop response (pcap non-blocking mode) #18–Cache pcap::Device::list() results briefly #23); docs build verified on Astro 7
• sharp ^0.34.5 → ^0.35.0 — libvips CVEs (Order release assets via consolidation job #25, Add MikroTik Neighbor Discovery Protocol (MNDP) support #26)
• js-yaml override tightened to >=4.3.1 <5 — quadratic DoS (docs.yml: bump Node 20 -> 22 for pnpm 11 #28, docs-next: add screenshots to GUI + CLI pages #30); capped below 5 because js-yaml 5 drops the default export astro imports (the old >=4.2.0 override was floating it to 5.x and breaking the build)
• transitive: nanoid 3.3.18 (Bump actions/upload-pages-artifact from 3 to 5 #32, Bump actions/deploy-pages from 4 to 5 #34), postcss 8.5.26 (docs-next: prefix internal links with /PortFinder/ base #29, Bump pnpm/action-setup from 4 to 6 #33), svgo 4.1.0 (Log non-UTF-8 bytes in LLDP TLVs instead of silently lossy-decoding #24)

Verified: cargo check clean, pnpm build in docs-next builds all 9 pages.

Supersedes the open Dependabot PRs for quinn-proto, astro, and sharp.

🤖 Generated with Claude Code