[Chore] Update safe workspace dependencies

[roomote-management]

​Created by Roomote. View the task or mention @roomote for follow-up asks.

What changed

• Updated compatible patch and minor releases across the website, CLI, metrics handler, and root tooling.
• Moved simple-git to 3.36.0 to clear its RCE advisories.
• Deduplicated the legacy minimatch and brace-expansion chains onto patched releases.
• Pinned serverless-esbuild to 1.52.1 and Tailwind CSS to 3.4.17, the newest tested releases that preserve the repository's Node 14/16 support.
• Refreshed the Yarn v1 lockfile without migrating package-manager formats.

Why this change was made

The workspace had 26 audit findings and a broad set of stale compatible dependencies. This update takes the safe maintenance improvements while avoiding dependency lines that silently raise the repository's runtime requirement to Node 18 or 20.

Impact

There is no intended product behavior change. On Node 16.20.2, the frozen install, lint, CLI build, 100-route website build, and metrics packaging all pass; the website also renders successfully in a browser. The audit is reduced from 26 findings to 15.

The remaining security fixes are deferred because they require a runtime migration:

• tiged -> tar: moving from tar@6 to patched tar@7.5.22 requires Node 18 and should be handled with the repository's Node support policy and CLI compatibility review. This accounts for 13 remaining findings.
• autoprefixer -> browserslist: patched browserslist@4.28.7 resolves to a node-releases line requiring Node 18. This accounts for 2 remaining findings.

Other deferred major upgrades:

• Astro 1 to 7 plus the Astro React and MDX integrations requires a framework migration and content/build regression pass.
• React 18 to 19, Headless UI 1 to 2, Heroicons 1 to 2, and react-lottie-player 1 to 2 require application compatibility testing.
• ESLint 8 to 10 and typescript-eslint 5 to 8 require lint configuration and rule migration.
• Tailwind CSS 3 to 4 requires CSS/config migration and full visual review.
• Serverless 3 to 4 and serverless-offline 12 to 14 require Node/runtime and deployment validation.
• Rimraf 3 to 6, yargs-parser 21 to 22, clsx 1 to 2, prettier-plugin-astro 0 to 1, and newer esbuild lines require API or tooling migration checks.

Screenshots

[netlify]

✅ Deploy Preview for starter-dev ready!

Name	Link
🔨 Latest commit	caf7c0a
🔍 Latest deploy log	https://app.netlify.com/projects/starter-dev/deploys/6ab08d91781e0a0008b7bead
😎 Deploy Preview	https://deploy-preview-1346--starter-dev.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.
🤖 Make changes	Run an agent on this branch

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[netlify]

✅ Deploy Preview for shopify-next-tailwind canceled.

Name	Link
🔨 Latest commit	caf7c0a
🔍 Latest deploy log	https://app.netlify.com/projects/shopify-next-tailwind/deploys/6ab08d91fa773c00087149ba