Bump @types/node to 26 and relax the dep cooldown to 3 days

- Bump `@types/node` to `^26` (`apps/desktop/package.json`), resolving to `26.0.1` to match the Node 26.4.0 toolchain pinned in `.mise.toml`.
- Lower the install-side supply-chain gate: `pnpm-workspace.yaml` `minimumReleaseAge` 20160 → 4320 minutes (14 → 3 days), with the surrounding comments updated to match. `@types/node@26.0.1` (published 2026-06-24) now installs cleanly instead of tripping the 14-day window.
- Lower Renovate's PR-open cooldown to match: `renovate.json` top-level `minimumReleaseAge` 14 → 3 days, plus the first-party-crates rationale comment. The first-party `0 days` override and the `vulnerabilityAlerts` 3-day gate are unchanged.

Author: vdavid

apps/desktop/package.json

@@ -72,7 +72,7 @@
     "@sveltejs/vite-plugin-svelte": "^7.0.0",
     "@tauri-apps/cli": "^2.10.1",
     "@testing-library/svelte": "^5.3.1",
-    "@types/node": "^25.6.0",
+    "@types/node": "^26",
     "@vitest/coverage-v8": "^4.1.5",
     "axe-core": "^4.11.3",
     "eslint": "^10.2.1",