chore(deps): batch-bump biome, commitlint, svelte, playwright, +2 (#160)

consolidate the routine dependabot bumps onto one branch so ci runs
against a single coherent lockfile instead of stalling per-pr on the
github-token lockfile-sync that never re-triggers checks. biome
2.5.0->2.5.1, commitlint 21.0.2->21.1.0, svelte 5.56.3->5.56.4,
axe-core/playwright 4.11.3->4.12.1, playwright/test 1.61.0->1.61.1,
testing-library/svelte 5.4.1->5.4.2, fast-xml-parser 5.9.0->5.9.3.

the astro 6->7 major (dependabot #134) is held back: astro 7 breaks
the static build (rollupOptions.input SSR-entry error under the
pinned vite override) and needs a dedicated migration, not a batch
bump.

Co-authored-by: datascry <datascry@users.noreply.github.com>

Author: datascry