chore(deps): bump next, brace-expansion and fast-uri in docs/site

[robinbowes]

Clears the five open Grype code-scanning alerts, all against docs/site/pnpm-lock.yaml.

Alert	Package	Change	Advisory
#44	next	16.3.5 → 16.3.8	GHSA-vcvr-r3jv-pc5j
#40	brace-expansion	5.0.9 → 5.0.12	GHSA-6j4f-fj2g-mc7p
#41	brace-expansion	5.0.9 → 5.0.12	GHSA-qhr7-859c-m2p7
#42	brace-expansion	5.0.9 → 5.0.12	GHSA-q2hr-2g5m-vwhr
#43	fast-uri	3.1.7 → 3.1.8	GHSA-hrr3-gc8f-f4qj

Changes

• docs/site/package.json: next pinned to 16.3.8.
• docs/site/pnpm-workspace.yaml: override floors raised for brace-expansion (<5.0.12) and fast-uri (<3.1.8), with comments naming the advisories each floor covers.
• docs/site/pnpm-lock.yaml: regenerated. Only next, its @next/* companions, brace-expansion and fast-uri change version.

brace-expansion and fast-uri are transitive dependencies of serve, a devDependency used for local preview. No Go code changes.

Verification

• task docs:build succeeds; the /og/docs/[...slug] routes prerender.
• pnpm run types:check passes.
• serve out starts and returns 200 (exercises minimatch's require() of brace-expansion 5.0.12).
• grype dir:docs/site --only-fixed reports no vulnerabilities.

🤖 Generated with Claude Code