chore(ast-grep): upgrade to ast-grep 0.45.3

[github-actions]

Stack (root → tip):

• ➡️ chore(ast-grep): upgrade to ast-grep 0.45.3 #334 (you are here)
  • test(ast-grep): make the ast-grep 0.45.3 upgrade land green #337

Upstream ast-grep is ahead of the version this repository pins.

This moves every @ast-grep/cli* pin in packages/cli/package.json
from 0.45.2 to 0.45.3 and regenerates
pnpm-lock.yaml. The pins move together on purpose: the platform
packages are selected by optional dependency, so a straggler left at
the old version is a different ast-grep on one platform than on the
others. sg-detect.cjs fails the run rather than open a partial bump.

Nothing else is edited. The rewrite replaces a version string in pins
it can already enumerate and refuses if the count does not match, so
it cannot add a dependency or reformat the file — the diff below is
eight version strings, a resolved lockfile, and a changeset.

This pull request rolls: if upstream releases again before it merges,
the branch, title, and body are rewritten to the newer version rather
than a second pull request being opened. Push a commit to the branch
and that stops — the workflow will not force-push over a commit it did
not write.

---

Upstream release notes — 0.45.3

https://github.com/ast-grep/ast-grep/releases/tag/0.45.3

• chore(deps): update dependency dprint to v0.57.0 #2916
• feat: add min-severity cli #2917
• fix(outline): anchor fallback signatures to names #2913
• feat(outline): add Markdown heading support #2912
• chore(deps): update dependency oxlint to v1.80.0 #2908
• chore(deps): update dependency @ast-grep/napi to v0.45.2 #2906
• feat: add min-severity cli (#2917) #2720
• fix: ast-grep-ignore must be at first be the frist alphabet to take effect #2909
• chore: update tree-sitter 0.27 bb74529
• fix: fix clippy c6b32d7