[codex] update dependencies

[YKDZ]

What changed

• Updated pnpm workspace dependencies recursively to the latest registry versions and regenerated pnpm-lock.yaml.
• Updated root packageManager to pnpm@11.5.1.
• Updated Python lower-bound requirements for the spaCy server.
• Replaced deprecated lucide-vue-next imports in @cat/ui with @lucide/vue.
• Aligned @cat/app-api peer dependency ranges with the updated app runtime dependencies and added hono-rate-limiter for @hono/mcp.
• Added pnpm peer dependency allowances for current zod/tailwind combinations that were runtime-checked and accepted by local validation.

Validation

• pnpm install --frozen-lockfile
• pnpm peers check
• pnpm outdated -r (no remaining direct outdated dependencies)
• moon ci :test :lint :typecheck :fmt --quiet
• moon exec :test :lint :typecheck :fmt --on-failure continue --upstream deep --quiet

Notes

A separate previously pushed branch, codex/update-dependencies, included an unrelated pre-existing local commit. This PR uses codex/update-dependencies-clean from origin/main so the diff is limited to dependency-related changes.