fix(ci): update dependencies blocked by security audit

[nick-csu]

Summary

Both the pre-release promotion run and main CI stopped at npm audit --audit-level=high, before any build ran. Raise the gRPC, Next.js, and Wrangler minimum versions to patched releases and update the vulnerable transitive packages in the lockfile.

Keep the existing audit gate enabled. The clean install now reports seven low-severity findings and no moderate, high, or critical findings. The remaining low findings come from Scalar's AI SDK dependencies.

Fixes the failures in https://github.com/cortex-docs/cortex/actions/runs/36839536425 and https://github.com/cortex-docs/cortex/actions/runs/36839548442.

Verification

• Clean npm ci and npm audit --audit-level=high pass.
• npm run format:check, npm run lint, and npm run build pass.
• npm run test:coverage passes: 413 tests across all six tested workspaces, including coverage thresholds.
• The assets-only Cloudflare demo builds with the production API URL.
• Cloudflare security configuration validation and all three Wrangler deployment dry runs pass.
• npm run pack:check passes, including installed CLI commands, generated SDK and MCP builds, docs preview, static HTML export, and the docs MCP package.
• GitHub CI run #37323390355 passes, including the quality job and both live UI and static export browser suites.
• Dependency-only change; existing tests cover compatibility and no user interface documentation changes are needed.
• No secrets or private data are included.