fix(deps): clear remaining 14 website dependabot advisories

Sweep of website/ deps to latest within ranges, plus a vite downgrade
from 8 -> 7 to match astro's transitive vite (7.3.2) and avoid a
rolldown regression with @tailwindcss/vite 4.2.4.

Closes alerts #28 #29 #30 #31 #33 #34 #35 #36 #37 #38 #39 #40 #44 #48
covering vite, picomatch, postcss, yaml, astro, smol-toml.

- vite ^8.0.1 -> ^7.3.2 (drops the now-redundant vite 8 lineage; astro
  pulls 7.3.2 transitively, which is the patched version)
- astro 6.0.6 -> 6.2.2 (#44)
- @tailwindcss/vite 4.2.2 -> 4.2.4
- smol-toml: lockfile bump to 1.6.1 (#28)
- postcss: lockfile bump to 8.5.14 (#48)
- picomatch: lockfile bumps to 2.3.2 + 4.0.4 (#29 #30 #39 #40)
- yaml is now omitted entirely (it was an optional vite peer)

Verified: pnpm build succeeds; no @tailwindcss/vite peer-dep warnings.

Author: maxholman

website/package.json

@@ -11,30 +11,30 @@
 		"preview": "wrangler dev"
 	},
 	"dependencies": {
-		"@astrojs/markdoc": "^1.0.2",
-		"@astrojs/sitemap": "^3.7.1",
+		"@astrojs/markdoc": "^1.0.4",
+		"@astrojs/sitemap": "^3.7.2",
 		"@fontsource-variable/jetbrains-mono": "^5.2.8",
 		"@fontsource/dm-serif-display": "^5.2.8",
 		"@fontsource/inter": "^5.2.8",
-		"@iconify-json/lucide": "^1.2.98",
+		"@iconify-json/lucide": "^1.2.105",
 		"@iconify-json/ph": "^1.2.2",
 		"@resvg/resvg-js": "^2.6.2",
-		"@tailwindcss/vite": "^4.2.2",
-		"astro": "^6.0.6",
+		"@tailwindcss/vite": "^4.2.4",
+		"astro": "^6.2.2",
 		"astro-icon": "^1.1.5",
-		"astro-pagefind": "^1.8.5",
+		"astro-pagefind": "^1.8.6",
 		"class-variance-authority": "^0.7.1",
 		"clsx": "^2.1.1",
-		"satori": "^0.25.0",
+		"satori": "^0.26.0",
 		"shiki": "^4.0.2",
 		"tailwind-merge": "^3.5.0",
-		"tailwindcss": "^4.2.2"
+		"tailwindcss": "^4.2.4"
 	},
 	"devDependencies": {
-		"oxfmt": "^0.41.0",
-		"oxlint": "^1.56.0",
-		"vite": "^8.0.1",
-		"wrangler": "^4.75.0"
+		"oxfmt": "^0.48.0",
+		"oxlint": "^1.63.0",
+		"vite": "^7.3.2",
+		"wrangler": "^4.88.0"
 	},
 	"packageManager": "pnpm@10.30.2"
 }