D/DEVCOM on the ADR, plus a postcss security fix

This release adds the Development Command and D/ACD to the ADR and Roster Statistics, closes a postcss XSS advisory, and moves the charts stack onto ApexCharts 5.

ADR and Roster Statistics

• D/DEVCOM and D/ACD (#158, thanks @HWqs). The ADR gets a "Development Command" section for D/DEVCOM, and D/ACD now shows under Auxiliary Combat Division. Both appear on Roster Statistics with their own chart colors, and the C/ACD group IDs were refreshed to match /roster/groups. Closes 7cav.us ticket #12005.

Security

• postcss patched for CVE-2026-41305 (#156). An override forces the patched postcss version, which closes the XSS advisory.

Charts stack

• ApexCharts 3.54 → 5.15 and react-apexcharts 1.5 → 2.1 (#161, #162, then patch bumps in #167). 1.3.0 kept react-apexcharts pinned at 1.5.0 to hold ApexCharts on 3.x; that pin is now lifted and both libraries move together.

Dev environment

• The example compose file now boots a working local stack (#155).

Dependencies and CI

• Server: form-data 4.0.6, node-cron 4.5.0, pg 8.22.0, axios 1.18.1 (#154, #159, #166)
• Client: lucide-react 1.21.0, @tanstack/react-query 5.101.1 (#160, #167)
• CI: actions/checkout 7, peter-evans/create-pull-request 8 (#163, #164)

Full changelog: 1.3.0...1.4.0