[antick]

Fixes the failing Dependency audit step in CI (new advisories since the last green run on main).

• Overrides: http-cache-semantics >=4.3.0 (GHSA-ch52-4w7c-c8xp), source-map-js >=1.2.2 (GHSA-68fv-2mgg-jv7q), sharp >=0.35.5 (GHSA-wq5f-xc86-pv6w).
• Audit ignores, only for advisories with no patched release: braces GHSA-vfj7-8cjw-p6xm and sprintf-js GHSA-hp3w-g68c-fv3c (both build tooling). Remove each when a fix ships.

pnpm audit --audit-level=moderate passes locally with 2 ignored.