build(deps): bump dependency version upper bounds

[marevol]

Summary

Widen dependency version upper bounds across backend and frontend, applying updates from Dependabot PRs #27, #28, #31, #32, #34, #35.

Changes Made

Backend (pyproject.toml)

Package	Before	After	Resolved Version
django-cleanup	<7	<10	6.0.0 (unchanged)
pandas	<3	<4	2.3.3 (constrained by irspack==0.4.0)
redis	<6	<8	5.3.1 (unchanged)
pytest-asyncio	<1	<2	0.26.0 (unchanged)

Frontend (package.json)

Package	Before	After
vue-router	^4.5.0	^5.0.2
pinia	^2.3.0	^3.0.4
vitest	^2.1.0	^4.0.18
@vitest/coverage-v8	^2.1.0	^4.0.18
vue-eslint-parser	(transitive)	^10.4.0 (explicit)

• pinia ^3.0.4 — required by vue-router 5's peer dependency; backward-compatible store API
• vue-eslint-parser — previously a transitive dep, became missing after package tree restructuring

Test Fixes (vitest 4.x compatibility)

• useWebSocket.test.ts: mockReturnValue → mockImplementation(function() {...}) — vitest 4 requires constructor mocks to use regular function, not arrow functions
• DataUploadPage.test.ts: same arrow → regular function fix for XMLHttpRequest mock constructor

Testing

• vue-tsc --noEmit: passed
• eslint src --fix: 0 errors (17 pre-existing warnings)
• vitest run: 702/702 tests passed

Breaking Changes

None. All changes are backward-compatible version range widenings.

Additional Notes

• pandas resolves to 2.3.3 (still 2.x) because irspack==0.4.0 constrains it. The wider <4 bound prepares for when irspack relaxes its constraint.
• Closes Update django-cleanup requirement from <7,>=6.0 to >=6.0,<10 in /backend #27, Bump @vitest/coverage-v8 from 2.1.9 to 4.0.18 in /frontend #28, Bump vue-router from 4.6.4 to 5.0.2 in /frontend #31, Update pandas requirement from <3,>=2.2 to >=2.2,<4 in /backend #32, Update redis requirement from <6,>=5.0 to >=5.0,<8 in /backend #34, Update pytest-asyncio requirement from <1,>=0.24 to >=0.24,<2 in /backend #35