v2.2.1

TickTune 2.2.1 — dependencies

Three packages in the shipped bundle moved: Astro 7.4.7, music-metadata
12.3.5 and i18next 26.7.2. No source file changed.

Around them:

• Playwright 1.65.0, with the visual image moved to
  playwright:v1.65.0-noble by digest. That image has no corepack, so the
  visual job installs the pnpm that packageManager names.
• @lhci/cli 0.16.0, on Lighthouse 13. Four of the five dev-tree overrides
  left pnpm-workspace.yaml, and extract-zip left the tree, which closes its
  two high advisories. The whole-tree audit went from four to two, the two
  with no patched release.
• Tailwind 4.3.5, Vitest 5.1.0, Wrangler 4.158.0 and the rest of the
  weekly group; pnpm/action-setup 6.1.1 and sonarqube-scan-action 8.4.1.

Not taken: i18next 27, a major inside its seven-day cooldown, and
TypeScript 7, which svelte-check and typescript-eslint still refuse.

Dependabot's PR 119 for the same bumps was red because of its lockfile,
not the code; the bumps were redone by hand in PR 120.

The live checklist ran on PR 120's preview before the merge:
tests/manual/v2.2.1-live-checklist.md, docs/16 "v2.2.1".