Run August 2026 maintenance pass

[llbbl]

Run a full maintenance pass for luddy.dance, including grouping similar Dependabot dependency bumps, applying safe upgrades, and fixing high-confidence maintenance findings from quality checks and a source sweep.

Acceptance

• Similar Dependabot/dependency updates are consolidated where safe, with major-risk upgrades deferred or called out.
• Lint, tests, and build are run or blockers are documented with exact commands and failures.
• Any local Codex/context scratch file used for this work is ignored by git.

Tasks

• task-1 - Consolidate safe dependency upgrades
• task-2 - Run quality gates and fix high-confidence findings
• task-3 - Verify ignored project context/tracking setup

[llbbl]

Completed under issue #31 and merged in PR #33, so this issue is superseded.