Replace the vulnerable 7.13.0 pins with 7.18.4 to include the fixes for CVE-2026-42211 and CVE-2026-42342 without moving the application to React Router 8.

Update all five framework packages in both the frontend and website, and align the shared TypeScript utilities dependency. Regenerate yarn.lock through Yarn so the runtime, build tooling, and transitive Express adapter resolve to the same patched release with verified package checksums.

Validate the eleven direct pins and six resolved React Router packages, patch whitespace, and package resolution consistency without linking or running build scripts. Yarn reports peer dependency warnings outside this focused update. Heavy checks, frontend builds, and tests were not run as requested; a tagged release must rebuild and publish the container images.

Fixes #1859.