chore(deps): patch Dependabot security advisories (esbuild, qs, uuid, yaml, js-yaml, babel, otel, rembg) (#257)

Resolve the actionable Dependabot alerts via pnpm overrides (for transitive deps) and a Python pin bump.

- pnpm overrides: esbuild >=0.28.1 (the lone high-severity alert), @babel/core >=7.29.6, @opentelemetry/core >=2.8.0, js-yaml >=4.2.0, qs >=6.15.2, uuid >=11.1.1, yaml >=2.8.3
- rembg 2.0.62 -> 2.0.75 in requirements.txt and requirements-gpu.txt

Verified: pnpm install, typecheck, lint, and full build all pass.

NOT included: the astro advisory requires Astro 5 -> 6 (a major, breaking framework upgrade), which warrants its own migration PR rather than a security bump.

package.json

@@ -104,7 +104,14 @@
       "protobufjs": ">=7.5.6",
       "@protobufjs/utf8": ">=1.1.1",
       "postcss": ">=8.5.10",
-      "vite": ">=6.4.2"
+      "vite": ">=6.4.2",
+      "esbuild": ">=0.28.1",
+      "@babel/core": ">=7.29.6",
+      "@opentelemetry/core": ">=2.8.0",
+      "js-yaml": ">=4.2.0",
+      "qs": ">=6.15.2",
+      "uuid": ">=11.1.1",
+      "yaml": ">=2.8.3"
     }
   },
   "dependencies": {

packages/ai/python/requirements-gpu.txt

@@ -1,4 +1,4 @@
-rembg==2.0.62
+rembg==2.0.75
 realesrgan==0.3.0
 paddleocr==2.9.1
 paddlepaddle-gpu==3.0.0

packages/ai/python/requirements.txt

@@ -1,4 +1,4 @@
-rembg[cpu]==2.0.62
+rembg[cpu]==2.0.75
 realesrgan==0.3.0
 paddleocr[doc-parser]>=3.4.0,<3.5.0
 paddlepaddle>=3.0.0,<3.1.0