build(deps): bump all package and workflow dependencies

[mikehardy]

Merge path

Targets test/e2e-playwright-design (single commit). Retarget to main after the e2e PR lands — this should merge to main only once e2e is on main.

• Blocked by test: e2e playwright implementation #1389

Summary

• Bump pnpm catalog, workspace package.json files, lockfile, and CI workflows to current stable versions (pnpm 11, Node 24.18.0, Next 16, Vite 8, Vitest 4, React 19.2, ESLint 9, etc.).
• Pin workflow actions to SHAs (inherits e2e base); update firebase-tools in CI.
• Fix fallout: Vitest 4 constructor mocks, jsdom localStorage setup, TanStack Form error assertions, ESLint 9 cap (angular-eslint), react-hooks/refs lint fixes.
• Document Firebase JS SDK version policy in AD-9 — catalog stays on v11 for @angular/fire; peers allow v12 for consumers; optional split strategy described there.

Firebase policy (read before reviewing version choices): AD-9 in decisions.md

Intentionally not bumped (see AD-9 / PR discussion): ESLint 10 (angular-eslint peer), catalog Firebase 12 (@angular/fire@20), TypeScript 6 (tsup DTS), Angular 22 (@angular/fire peer).

Test plan

• pnpm install
• pnpm build
• pnpm test
• pnpm lint:check
• pnpm test:e2e (CI on this PR)

[gemini-code-assist]

Code Review

This pull request upgrades the workspace to Node.js v24 and pnpm v11, updates numerous dependencies across the monorepo via the pnpm catalog, and documents the Firebase JS SDK version policy (AD-9). It also addresses compatibility issues with jsdom 29 and Node 26 by adding a custom localStorage mock in the core test setup, refactors various test mocks, and wraps ref assignments in useEffect hooks in React forms. Feedback is provided to improve the custom localStorage mock in the test setup to fully implement the standard Storage interface by adding the length property and key() method.

[wiz-9635d3485b]

Wiz Scan Summary

Scanner	Findings
Vulnerabilities	-
Sensitive Data	-
Secrets	-
IaC Misconfigurations	-
SAST Findings	2
Software Management Findings	-
Total	2

View scan details in Wiz

To detect these findings earlier in the dev lifecycle, try using Wiz Code VS Code Extension.