fix(deps): resolve Dependabot alerts

[ppmarkek]

Summary

• migrate from the removed react-router-dom package to react-router@8.3.0 and update all application, Storybook, and test imports
• pin vulnerable transitive packages to brace-expansion@5.0.8 and valibot@1.4.2 through pnpm overrides
• regenerate pnpm-lock.yaml and verify one patched version of each affected package is installed
• remove the stale npm lockfile and prevent its regeneration in this pnpm workspace
• align the documented and enforced Node.js requirement with React Router 8 (>=22.22.0)

Validation

• pnpm install --frozen-lockfile
• pnpm audit --audit-level=low — no known vulnerabilities
• dependency alignment checks for react-router, brace-expansion, and valibot
• pnpm test
• pnpm typecheck
• pnpm lint
• pnpm build

All validation commands completed successfully on Node.js 22.23.1.