fix(security): resolve all dependency vulnerabilities across the stack

pnpm workspace (84 audit findings -> 0):
- Prisma 7.7.0 -> 7.10.0 (server)
- desktop/main: koa 2.16.1 -> 3.2.1, markdown-it 14.2.0 -> 14.3.0
  (linkify-it <= 5.0.1), sass-embedded -> ^1.103.1 (immutable),
  brace-expansion/minimatch/nanoid deep-updated to patched versions
- pnpm overrides updated for transitive advisory coverage

Rust crates (28 vulnerabilities across 7 lockfiles -> 0):
- cargo update across cli, torrential, desktop/src-tauri,
  libraries/{droplet,droplet_types,libarchive,native_model}

Go backend (govulncheck: 1 -> 0):
- stdlib module updates in go.work.sum

Verified: pnpm audit clean in every workspace package; cargo audit clean
on all 7 crates; govulncheck reports no known vulnerabilities.

desktop/main/package.json

@@ -19,8 +19,8 @@
     "@tauri-apps/plugin-os": "^2.3.2",
     "@tauri-apps/plugin-shell": "^2.3.3",
     "@types/node": "^25.5.0",
-    "koa": "^2.16.1",
-    "markdown-it": "^14.2.0",
+    "koa": "^3.2.1",
+    "markdown-it": "^14.3.0",
     "micromark": "^4.0.1",
     "nuxt": "^4.5.1",
     "scss": "^0.2.4",
@@ -33,7 +33,7 @@
     "@types/markdown-it": "^14.1.2",
     "autoprefixer": "^10.4.20",
     "postcss": "^8.5.18",
-    "sass-embedded": "^1.79.4",
+    "sass-embedded": "^1.103.1",
     "tailwindcss": "^3.4.13",
     "typescript": "^5.8.3",
     "vue-tsc": "^2.2.10"

package.json

@@ -1,5 +1,15 @@
 {
   "name": "drop",
   "private": true,
-  "packageManager": "pnpm@10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319"
-}
+  "packageManager": "pnpm@10.33.0+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319",
+  "devDependencies": {
+    "@ast-grep/cli": "^0.45.2",
+    "knip": "^6.32.2",
+    "lefthook": "^2.1.10",
+    "prettier": "^3.9.6",
+    "prettier-plugin-sort-json": "^4.2.0"
+  },
+  "scripts": {
+    "prepare": "lefthook install"
+  }
+}

server/package.json

@@ -29,8 +29,8 @@
     "@nuxt/image": "^1.10.0",
     "@nuxt/kit": "^3.20.1",
     "@nuxtjs/i18n": "^9.5.5",
-    "@prisma/adapter-pg": "7.7.0",
-    "@prisma/client": "7.7.0",
+    "@prisma/adapter-pg": "7.10.0",
+    "@prisma/client": "7.10.0",
     "@simplewebauthn/browser": "^13.2.2",
     "@simplewebauthn/server": "^13.2.2",
     "@tailwindcss/vite": "^4.0.6",
@@ -58,7 +58,6 @@
     "parse-cosekey": "^1.0.2",
     "pino": "^9.14.0",
     "pino-pretty": "^13.1.1",
-    "prisma": "7.7.0",
     "sanitize-filename": "^1.6.3",
     "semver": "^7.7.1",
     "shescape": "^2.1.14",
@@ -94,6 +93,7 @@
     "ofetch": "^1.4.1",
     "prettier": "^3.5.3",
     "prettier-plugin-sort-json": "^4.1.1",
+    "prisma": "7.10.0",
     "sass": "^1.79.4",
     "tailwindcss": "^4.0.0",
     "typescript": "^5.8.3",