fix: merge Dependabot bumps with security overrides; resolve all 38 vulnerabilities

Incorporates remote Dependabot bumps (prettier ^3.8.4, typescript ^6.0.3,
@floating-ui/dom ^1.7.6, pretty-bytes ^7.1.0, remark-gfm ^4.0.1) alongside
local security fixes (esbuild ^0.28.1, esbuild-sass-plugin ^3.7.0, js-yaml
^4.2.0, npm overrides for katex/xmldom/serve-handler transitive deps).
Clean reinstall confirms: 0 npm audit vulnerabilities.

Author: EngGarith

package-lock.json

@@ -36,7 +36,7 @@
   },
   "dependencies": {
     "@clack/prompts": "^0.7.0",
-    "@floating-ui/dom": "^1.6.10",
+    "@floating-ui/dom": "^1.7.6",
     "@napi-rs/simple-git": "0.1.19",
     "@tweenjs/tween.js": "^25.0.0",
     "async-mutex": "^0.5.0",
@@ -62,7 +62,7 @@
     "pixi.js": "^8.3.4",
     "preact": "^10.24.0",
     "preact-render-to-string": "^6.5.11",
-    "pretty-bytes": "^6.1.1",
+    "pretty-bytes": "^7.1.0",
     "pretty-time": "^1.1.0",
     "reading-time": "^1.5.0",
     "rehype-autolink-headings": "^7.1.0",
@@ -75,7 +75,7 @@
     "remark": "^15.0.1",
     "remark-breaks": "^4.0.0",
     "remark-frontmatter": "^5.0.0",
-    "remark-gfm": "^4.0.0",
+    "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",
     "remark-parse": "^11.0.0",
     "remark-rehype": "^11.1.0",
@@ -116,8 +116,8 @@
     "@types/ws": "^8.5.12",
     "@types/yargs": "^17.0.33",
     "esbuild": "^0.28.1",
-    "prettier": "^3.3.3",
+    "prettier": "^3.8.4",
     "tsx": "^4.19.0",
-    "typescript": "^5.6.2"
+    "typescript": "^6.0.3"
   }
 }