chore(deps): dependency sweep — security bumps + in-range freshening

[apify-deps]

Summary

Dependency sweep — security bumps + in-range freshening (all within existing ranges):

• handlebars 4.7.9 → 4.7.10 (critical) — fixes #193, #194, #195
• smol-toml 1.6.1 → 1.9.0 (medium) — fixes #192
• brace-expansion 5.0.9 → 5.0.12 (medium) — fixes #178
• axios 1.18.1 → removed from the tree (high/medium) — fixes #169, #171, #172, #175, #183, #184, #185, #186, #187 — it was only a transitive dep of nx's bundled HTTP client; the lockfile refresh bumped nx 23.2.1 → 23.3.0, which no longer depends on axios at all. GitHub will auto-close these alerts once it rescans the default branch post-merge.
• opportunistic in-range freshening via pnpm update -r (@types/node, lerna, vite range bumps; assorted transitive bumps)

🧹 Pruned overrides (no longer needed)

• tar — no-op: resolves to the same 7.5.22 with or without the override.
• js-yaml@4 — no-op: resolves to the same 4.3.2 with or without the override.
• (kept esbuild: ^0.28.1 — still doing its job: without it, tsx's exact pin on esbuild@0.27.7 reappears in the tree.)

🤖 Generated with Claude Code