chore(deps): update weekly dependencies

[ZL-Asica]

Summary

Weekly dependency refresh from origin/main.

Key Changes

• Updated pnpm package manager metadata to pnpm@11.14.0.
• Updated patch/minor dependencies across Radix UI, Supabase, TanStack, Cloudflare, ESLint, Tailwind, Vite, Vitest, Wrangler, React Hook Form, Lucide, Immer, and related tooling.
• Accepted safe major updates for @cloudflare/workers-types 5 and nanoid 6.
• Removed the stale Zod 3 workspace override so declared zod@^4.4.3 resolves consistently.
• Migrated TanStack server functions from deprecated .inputValidator() to .validator().
• Regenerated cloudflare-env.d.ts with Wrangler 4.111.0 / workerd 1.20260710.1.
• Added transitive security overrides for @babel/core, hono, and undici.

Validation

Commands run:

• pnpm install
• pnpm lint:fix
• pnpm run cf-typegen
• pnpm build
• pnpm test
• pnpm peers check
• pnpm audit --audit-level low
• git diff --check

Skipped checks:

• pnpm run release:preflight was not run; this PR only updates dependencies/generated types and does not change release configuration.

UI Verification

• N/A - no UI behavior or layout changes.

Release and Data Safety

• No secrets, cookies, tokens, or private environment values are committed.
• No database schema changes were made.
• Cloudflare bindings were regenerated after the Wrangler/runtime type update.

Risks

• @types/node 26 and TypeScript 7 remain deferred as high-impact runtime/compiler major upgrades.
• @react-email/components remains deprecated; npm reports no newer package version.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[github-actions]

🧪 Pair Research PR Checks

• 🔐 Release preflight: ✅ success
• 🚨 Lint: ✅ success
• 🧪 Unit tests: ✅ success
• 🏗️ Build: ✅ success

🔗 Run: https://github.com/NUDelta/pair-research/actions/runs/29637010059