Move to the fixed crypto stack and patched dependencies; run quality CI on hosted runners (#47)

- Move backend and root transitive deps to patched versions
- Upgrade web to react-router 7.18 and patched vitest/dompurify
- Move the sign app to vite 6.4.3
- Depend on the fixed crypto stack in web, sign and backend
- sign: typecheck the shared code it compiles
- ci: run the quality jobs on GitHub-hosted runners, and build sign
- Move to @pezkuwi/api 16.5.39
- ci: run CodeQL for JavaScript/TypeScript on a GitHub-hosted runner

sign/package.json

@@ -10,21 +10,23 @@
     "preview": "vite preview"
   },
   "dependencies": {
+    "@pezkuwi/api": "^16.5.39",
+    "@pezkuwi/extension-dapp": "^0.62.27",
+    "@pezkuwi/extension-inject": "^0.62.27",
+    "@pezkuwi/keyring": "^14.0.26",
+    "@pezkuwi/util": "^14.0.26",
+    "@pezkuwi/util-crypto": "^14.0.26",
     "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "@pezkuwi/api": "^16.5.36",
-    "@pezkuwi/extension-dapp": "^0.62.20",
-    "@pezkuwi/extension-inject": "^0.62.20",
-    "@pezkuwi/keyring": "^14.0.25",
-    "@pezkuwi/util": "^14.0.25",
-    "@pezkuwi/util-crypto": "^14.0.25"
+    "react-dom": "^18.3.1"
   },
   "devDependencies": {
+    "@pezkuwi/api-augment": "^16.5.39",
+    "@types/node": "^22.20.5",
     "@types/react": "^18.3.12",
     "@types/react-dom": "^18.3.1",
     "@vitejs/plugin-react-swc": "^3.5.0",
     "typescript": "^5.6.3",
-    "vite": "^5.4.10",
-    "vite-plugin-node-polyfills": "^0.22.0"
+    "vite": "^6.4.3",
+    "vite-plugin-node-polyfills": "^0.25.0"
   }
 }