⬆️ chore: update dependencies to latest compatible versions

[futjesus]

Summary

Non-interactive dependency update via npm-check-updates (npx npm-check-updates --format group -u), keeping only versions that pass the full toolchain.

Updated (31 packages)

• Patch/minor (28): all Radix UI primitives, Storybook 10.4 → 10.5, Tailwind CSS 4.2 → 4.3, Vite 8.1.5, Vitest 4.1.10, typescript-eslint 8.65, TanStack, lucide-react, prettier, postcss, autoprefixer, etc.
• Major (3): @testing-library/jest-dom 6 → 7, react-day-picker 9 → 10, vite-plugin-dts 4 → 5.
• npm audit fix: resolved high-severity brace-expansion advisory (GHSA-3jxr-9vmj-r5cp) — 0 vulnerabilities remaining.

Intentionally NOT updated

• ESLint 10: eslint-plugin-react supports up to ESLint 9.7 and eslint-plugin-vitest up to ESLint 9; the flat config also imports @eslint/js, no longer bundled with ESLint 10. Stays on ^9.39.5.
• TypeScript 7: @typescript-eslint 8.65 requires TypeScript <6.1; the peer conflict breaks npm install. Stays on ^6.0.3.

Both are now listed in a new .ncurc.json reject array (same pattern as the civo micro-frontends) so deps:update skips them until the ecosystem catches up.

Code changes

• Datepicker: react-day-picker 10 removed the deprecated classNames.table key — merged w-full into month_grid (the replacement key the component already used).
• CLAUDE.md: documented the dependency-update workflow (use npm-check-updates, respect .ncurc.json, verify with lint/types/ci).

Test plan

• npm run lint — clean
• npm run check:types — clean
• npm run ci — prettier check, 460 tests passed (35 files), production build OK
• npm audit — 0 vulnerabilities
• npx npm-check-updates re-run confirms .ncurc.json reject list is honored