chore(deps): update website dependencies

[viiccwen]

Related Issues

Supersedes #1441, #1443, #1447, #1448, #1449, #1450, and #1451.

Changes

• Bug fix
• New feature
• Refactoring
• Documentation
• Test
• CI/CD pipeline
• Other: dependency maintenance

Why

The website dependency graph had multiple overlapping Dependabot pull requests
and several outdated direct dependencies. Consolidating the updates provides a
single reproducible lockfile and allows the complete website stack to be
validated together.

The TypeScript 7 update also requires a small compatibility migration because
Docusaurus 3's shared TypeScript configuration still contains the removed
baseUrl compiler option.

How

• Update all website direct dependencies to their current npm releases:
  • Docusaurus packages from 3.10.1 to 3.10.2
  • Fontsource packages to 5.3.0
  • @mdx-js/react to 3.1.1
  • clsx to 2.1.1
  • prism-react-renderer to 2.4.1
  • React and React DOM to 19.2.8
  • rehype-katex to 7.0.1
  • TypeScript to 7.0.2
• Regenerate the npm lockfile and absorb the pending svgo, fast-uri,
  body-parser, webpack-dev-server, shell-quote, websocket-driver, and
  js-yaml updates.
• Replace the incompatible @docusaurus/tsconfig inheritance with equivalent
  project-local compiler options that preserve the @site/* path alias without
  using baseUrl.
• Add the explicit redirect callback parameter type required by TypeScript 7.

Validation

• npm ci
• npm run typecheck
• npm run build
• npm outdated --json --long reports no outdated direct dependencies
• npm audit reports no known vulnerabilities

The production build retains only the existing broken-link warnings from the
unchanged versioned documentation.

Checklist

• Added or updated unit tests for all changes — not applicable; dependency
  and configuration update only
• Added or updated documentation for all changes — not applicable; no
  user-facing behavior changed