chore(deps): aggregate weekly Dependabot batch (api, ui, docs, ci)

[agjs]

Consolidates the open Dependabot batch (#198–#218) into one PR. Lockfiles regenerated with bun@1.3.14 (respecting the 7-day install quarantine). All requested versions resolved exactly — nothing held back by the quarantine.

Verified locally

• api bun run check (typecheck + lint + lint:meta + lint-meta-docs + knip) ✅
• ui bun run check (lint + lint:meta + lint-meta-docs + format:check + typecheck + knip) ✅
• docs bun run build:ci (Astro build w/ Starlight 0.40 + sharp 0.35, fragment + rendered-markdown checks) ✅

Test suites (api needs Postgres/Redis, ui vitest + e2e) run on CI.

apps/api

Package	From	To	PR
@opentelemetry/exporter-trace-otlp-http	0.218.0	0.219.0	#210
@sentry/bun	10.56.0	10.57.0	#209
bullmq	5.78.0	5.78.1	#203
stripe	22.2.0	22.2.1	#204
eslint	10.4.1	10.5.0	#207
eslint-plugin-unicorn	65.0.1	66.0.0	#207
@types/nodemailer	8.0.0	8.0.1	#206
@boring-stack-pkg/eslint-plugin-stripe-webhooks	0.1.1	0.1.2	#212
knip	6.14.2	6.16.1	#213

ioredis stays pinned at 5.11.1 via the existing override; bullmq 5.78.1 is a patch bump and typechecks clean against it.

apps/ui

Package	From	To	PR
@hookform/resolvers	5.2.2	5.4.0	#218
react-hook-form	7.78.0	7.79.0	#217
i18next	26.2.0	26.3.1	#216
@sentry/react	10.56.0	10.57.0	#214
lucide-react	1.17.0	1.18.0	#208
@tailwindcss/vite + tailwindcss	4.3.0	4.3.1	#208
storybook (group: addon-a11y, addon-themes, react-vite, storybook)	10.4.2	10.4.4	#205
eslint	10.4.1	10.5.0	#211
eslint-plugin-react-refresh	0.5.2	0.5.3	#211
eslint-plugin-unicorn	65.0.1	66.0.0	#211
knip	6.14.2	6.16.1	#215

apps/docs

Package	From	To	PR
@astrojs/starlight	0.39.3	0.40.0	#199
@tailwindcss/vite + tailwindcss	4.3.0	4.3.1	#198
sharp	0.34.5	0.35.1	#200
wrangler	4.98.0	4.100.0	#201

The @astrojs/markdown-remark 7.2.0 override (tied to astro 6.4.6) still holds under Starlight 0.40 — astro build is green.

ci

• actions/checkout 6.0.3 → 7.0.0 across all 24 workflows (chore(ci): bump actions/checkout from 6.0.3 to 7.0.0 #202)

Source changes (lint conformance)

eslint-plugin-unicorn 66 (major) tightened two rules, flagging three pre-existing api spots. No behavior change:

• memory.ts — drop the unused value field from isExpired's param type (no-unused-properties)
• template.service.ts, preview.ts — if/assign → ternary (prefer-ternary)

Supersedes

Closes #198, #199, #200, #201, #202, #203, #204, #205, #206, #207, #208, #209, #210, #211, #212, #213, #214, #215, #216, #217, #218