[Chore] Patch smol-toml denial-of-service vulnerability

[roomote-roomote]

​Created by Roomote. View the task or mention @roomote-roomote for follow-up asks.

What changed

• Updated the direct smol-toml development dependency and pnpm override from 1.6.1 to 1.7.1.
• Regenerated the pnpm lockfile so direct and transitive resolutions use the patched release.
• Preserved the existing seven-day dependency release-age policy without exclusions.

Why this change was made

This addresses high-severity Dependabot alerts #136 and #137 for GHSA-7w5x-hrqm-74c2. Version 1.7.1 prevents malformed TOML comments from trapping the parser in an infinite loop.

Impact

There is no intended user-facing behavior change. Frozen installation, valid and malicious TOML parsing, the Modal-focused compute-provider tests, lint, type checks, and Knip passed. The broader deployment validator confirmed all Compose shapes before reaching a Caddy check that requires a Docker socket unavailable in the sandbox.

[roomote-community]

No code issues found. See task

_{Reviewed 426b487}