chore(deps): allowlist rete auto-arrange deps (elkjs, rete-auto-arrange-plugin, web-worker)

The Dependency Drift gate (scripts/check-dep-drift.mjs, T-24-SC1) was red in CI:
3 resolved names in pnpm-lock.yaml were unallowlisted. All three are legitimate
first-party deps of the rete auto-arrange feature (declared in packages/ui/rete/
package.json + leaves + VR), introduced when that phase landed but never
re-snapshotted into the allowlist. Re-snapshotted via --update; gate now green.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: serpentblade

scripts/dep-allowlist.txt

@@ -857,6 +857,7 @@ eastasianwidth
 editorconfig
 ee-first
 electron-to-chromium
+elkjs
 embla-carousel
 embla-carousel-autoplay
 emoji-regex
@@ -1353,6 +1354,7 @@ resolve-url-loader
 restore-cursor
 rete
 rete-area-plugin
+rete-auto-arrange-plugin
 rete-connection-plugin
 rete-render-utils
 retext
@@ -1547,6 +1549,7 @@ wbuf
 wcwidth
 weak-lru-cache
 web-namespaces
+web-worker
 webidl-conversions
 webpack
 webpack-dev-middleware