🔧 chore(deps): pin loose package.json specifiers to exact versions

Flip the four remaining caret specifiers across workspaces to exact
versions so package.json matches the already-exact lockfile resolutions
and Renovate cannot pull in-range bumps without a PR.

- app/package.json: nodemailer ^8.0.5 → 8.0.5
- package.json (root): @biomejs/biome ^2.4.8 → 2.4.8, lefthook ^2.1.4 → 2.1.4
- e2e/package.json: lodash ^4.18.1 → 4.18.1

Author: s-b-e-n-s-o-n

app/package.json

@@ -50,7 +50,7 @@
     "mqtt": "5.15.0",
     "nocache": "4.0.0",
     "node-cron": "4.2.1",
-    "nodemailer": "^8.0.5",
+    "nodemailer": "8.0.5",
     "openid-client": "6.8.2",
     "p-limit": "7.3.0",
     "parse-docker-image-name": "3.0.0",

e2e/package.json

@@ -33,7 +33,7 @@
     "@dotenvx/dotenvx": "1.57.1",
     "@playwright/test": "1.58.2",
     "artillery": "2.0.30",
-    "lodash": "^4.18.1"
+    "lodash": "4.18.1"
   },
   "overrides": {
     "brace-expansion": "5.0.5",

package.json

@@ -7,7 +7,7 @@
     "node": ">=24.0.0"
   },
   "devDependencies": {
-    "@biomejs/biome": "^2.4.8",
-    "lefthook": "^2.1.4"
+    "@biomejs/biome": "2.4.8",
+    "lefthook": "2.1.4"
   }
 }