Refresh the web runtime and development toolchain

[Navesz]

Summary

• update Next.js and React within their current stable lines
• update Cloudflare, Vite and Wrangler tooling to patched compatible releases
• refresh transitive development dependencies with non-breaking audit fixes
• make Vite config imports compatible with the upcoming native config loader
• correct the documented comparison metric count

Security

• production audit: 0 vulnerabilities
• development audit reduced from 13 findings to 2
• the two remaining image-size advisories are inherited from vinext 0.0.50; npm only offers the breaking vinext 1.0 beta migration, so this PR does not force it

Validation

• npm ci
• npm run lint
• npx tsc --noEmit
• npm test (141 passing)
• npm audit --omit=dev (0 vulnerabilities)