Update dependencies to fix npm audit advisories

[zortos293]

Summary

This PR resolves all npm audit advisories (1 high, 2 moderate) in the Electron client and updates native streamer crate patches. Vulnerability count reduced from 3 to 0.

Changes

OpenNOW Stable (opennow-stable/package-lock.json)

• ws 8.20.0 → 8.21.0 (fixes moderate advisory GHSA-58qx-3vcg-4xpx)
• tmp <0.2.6 → 0.2.7 (fixes high advisory GHSA-ph9p-34f9-6g65)
• brace-expansion 5.0.5 → 5.0.6 (fixes moderate advisory GHSA-jxxr-4gwj-5jf2)
• react 19.2.4 → 19.2.6
• react-dom 19.2.4 → 19.2.6
• lucide-react 1.7.0 → 1.17.0
• typescript 6.0.2 → 6.0.3
• tsx 4.20.6 → 4.22.3
• oxlint 1.62.0 → 1.67.0

Native Streamer (native/opennow-streamer/Cargo.lock)

• gstreamer 0.25.1 → 0.25.2
• gstreamer-sdp 0.25.0 → 0.25.2
• gstreamer-video 0.25.0 → 0.25.2
• gstreamer-webrtc 0.25.0 → 0.25.2
• serde_json 1.0.149 → 1.0.150

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: ae308949e8

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Update the Bun lockfile with these dependency bumps

These dependency ranges were bumped in package.json and package-lock.json, but the tracked opennow-stable/bun.lock was left on the old ranges and resolved versions (lucide-react/react/react-dom/ws plus oxlint, tsx, and typescript). In contexts that use the committed Bun lockfile, the audit fixes are not actually applied and installs can keep resolving the pre-update packages, so this dependency update is incomplete unless bun.lock is regenerated or removed.

Useful? React with 👍 / 👎.