chore(deps): take the weekly development updates

@testcontainers/postgresql 12.2.0, @types/node 26.6.4, @vitejs/plugin-react
6.1.2, knip 6.40, lefthook 2.2, pdfjs-dist 6.4.299 and shadcn 4.21.

pdfjs-dist is a development dependency that the image ships: the runner
hoists the pinned copy for document rendering. 6.4 asks for
@napi-rs/canvas ^1.0.10, which the production updates bring, so the store
keeps a single canvas build for it. eslint-config-next and
@next/bundle-analyzer stay on the 16.3 line with next.

package.json

@@ -114,25 +114,25 @@
     "@tailwindcss/postcss": "^4",
     "@tesseract.js-data/deu": "1.0.0",
     "@tesseract.js-data/eng": "1.0.0",
-    "@testcontainers/postgresql": "^12.1.0",
-    "@types/node": "26.6.2",
+    "@testcontainers/postgresql": "^12.2.0",
+    "@types/node": "26.6.4",
     "@types/pg": "^8.23.1",
     "@types/qrcode": "^1.5.6",
     "@types/react": "^19.3.0",
     "@types/react-dom": "^19.3.0",
     "@types/web-push": "^3.6.4",
-    "@vitejs/plugin-react": "^6.1.1",
+    "@vitejs/plugin-react": "^6.1.2",
     "@vitest/coverage-v8": "^4.1.5",
     "ajv": "^8.20.0",
     "eslint": "^9",
     "eslint-config-next": "16.3.8",
-    "knip": "^6.32.3",
-    "lefthook": "^2.1.12",
+    "knip": "^6.40.0",
+    "lefthook": "^2.1.17",
     "pdf-parse": "^2.4.5",
-    "pdfjs-dist": "6.3.289",
+    "pdfjs-dist": "6.4.299",
     "prettier": "^3.9.9",
     "prettier-plugin-tailwindcss": "^0.8.1",
-    "shadcn": "^4.16.1",
+    "shadcn": "^4.21.3",
     "tailwindcss": "^4",
     "testcontainers": "^12.2.0",
     "tw-animate-css": "^1.4.0",