chore(deps): batch dependency updates (carbon 0.109, vite 8, ts 6, node 24, python)

[keesfluitman]

Combines Renovate PRs #3, #5, #6, #7, #8, #9, #10, #11 into one validated update — merging them individually cascades pnpm-lock conflicts (all touch the lockfile).

Changes

• Frontend: carbon-components-svelte 0.99→0.109, carbon-icons/-preprocess minors, vite 7→8, typescript 5→6, @sveltejs/vite-plugin-svelte 6→7, eslint 9→10, prettier-plugin-svelte 3→4, @types/node 22→24, dev-dep minors
• Backend: fastapi/pydantic/uvicorn/httpx minors + aiofiles 25, chardet 7, redis 8, rich 15, pytest 9 (no runtime redis usage — verified safe)
• Node 20→24 (digest-pinned)
• pnpm 11 build approval: pnpm-workspace.yaml switched to allowBuilds (esbuild + carbon-components-svelte telemetry postinstall), and the Dockerfile copies it into the install layer so pnpm run build doesn't trip strictDepBuilds.

Verification

• ✅ svelte-check — no new errors (baseline main already has 62; this has 59)
• ✅ vite build clean (vite 8 + carbon 0.109)
• ✅ homepage renders (Carbon 0.109 paints), no runtime errors

Merging auto-closes #3/#5/#6/#7/#8/#9/#10/#11. (#2 pin-dependencies left for a follow-up.)

🤖 Generated with Claude Code