fix(deps): patch Dependabot security alerts

- Pillow 11.1.0 -> 12.2.0 (6 CVEs: OOB writes, decompression bomb, DoS)
- rembg 2.0.62 -> 2.0.75 (SSRF + path traversal in server component)
- @fastify/static ^8.1.0 -> ^9.1.3 (path traversal + route guard bypass)
- Remove redundant @fastify/static pnpm override
- Dismiss stale esbuild alert (already at 0.28.0)
- Dismiss file-type alert (16.5.4 is dev-only via @types/potrace)

pnpm-lock.yaml

@@ -20,7 +20,6 @@ overrides:
   '@protobufjs/utf8': '>=1.1.1'
   postcss: '>=8.5.10'
   vite: '>=6.4.2'
-  '@fastify/static': '>=9.1.3'
 
 importers:
 
@@ -121,7 +120,7 @@ importers:
         specifier: ^10.2.0
         version: 10.3.0
       '@fastify/static':
-        specifier: '>=9.1.3'
+        specifier: ^9.1.3
         version: 9.1.3
       '@neplex/vectorizer':
         specifier: ^0.1.0