Update vulnerable web dependencies within the shipped bundle

- react-router 6.30.6 / @remix-run/router 1.23.4 (open redirect, XSS advisories)
- styled-components 6.5.3, which brings postcss 8.5.28
- query-string 9.5.1 for decode-uri-component 0.5.0; parse() is the only API
  used and is unchanged
- in-range lockfile refresh

Bundle compared against the live build of 570586b: vendor chunks and the
loader change; the one page chunk that differs only renumbers the
query-string module. Tests 89/89, lint and type check green.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

packages/apps/package.json

@@ -27,7 +27,7 @@
     "@pezkuwi/react-query": "^1.0.2-1-x",
     "@pezkuwi/react-signer": "^1.0.2-1-x",
     "punycode": "^2.3.1",
-    "query-string": "^8.1.0",
+    "query-string": "^9.5.1",
     "react": "^18.2.0",
     "react-dom": "^18.2.0",
     "react-is": "^18.2.0"

packages/page-settings/package.json

@@ -19,7 +19,7 @@
     "@pezkuwi/apps-config": "^1.0.2-1-x",
     "@pezkuwi/react-components": "^1.0.2-1-x",
     "@pezkuwi/react-query": "^1.0.2-1-x",
-    "query-string": "^8.1.0"
+    "query-string": "^9.5.1"
   },
   "peerDependencies": {
     "react": "*",