chore(deps): complete jsdom 30 upgrade

[dependabot]

Bumps jsdom from 26.1.0 to 30.0.1 and completes the required test compatibility work.

Changes

• refresh the root pnpm lockfile so CI installs jsdom 30 rather than the stale root resolution
• update the workflow editor test selector to search below the mounted root element, matching jsdom 30's standards-compliant Element.querySelector behavior

Verification

• Node 24.18.0 / pnpm 9.12.3 frozen install
• targeted workflow editor tests: 4 passed
• full frontend suite: 172 files / 960 tests passed
• lint passed
• typecheck passed
• production build passed

Merge dependencies

• fix(ci): align frontend builds on Node 24 LTS #98 moves CI to Node 24; the current Node 20 job cannot start jsdom 30 workers because its Undici/WebIDL runtime is too old
• fix(deps): upgrade vulnerable runtime dependencies #99 clears dependency advisories inherited from the current default branch

Both must merge before this PR is refreshed and receives its final merge decision.

[Isaries]

Self-review: scope is the complete frontend/package.json diff for jsdom 30.0.1 plus official package metadata and CI configuration. Blockers: the PR omits the root pnpm-lock.yaml, and jsdom 30.0.1 requires Node ^22.22.2, ^24.15.0, or >=26 while CI is configured for Node 20. The update therefore cannot be validated or supported on the current toolchain. Decision: changes required; first move CI and the frontend build image to a supported LTS Node line, then regenerate the root lockfile and run the full frontend suite.

[Isaries]

Superseded by #110, which bumps jsdom to 30.0.1 with the root pnpm-lock.yaml update this PR was missing. The lockfile gap was a Dependabot configuration defect, fixed in #100. The Node engine constraint noted in review still applies and is tracked in #98.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.