fix(docs): refresh the Docusaurus lockfile past 109 of 116 advisories

docs/pnpm-lock.yaml had never been scanned (the nightly supply-chain
job covered uv.lock only): trivy found 116 advisories, 5 critical —
proxy-addr, shell-quote, websocket-driver, plus fast-uri, js-yaml,
brace-expansion, nanoid, lodash, path-to-regexp, picomatch, …

`pnpm update` within the existing ranges under the same 7-day release
cooldown (--config.minimum-release-age=10080), on pnpm 10.34.7:
Docusaurus 3.7 -> 3.10.2, 116 -> 7 findings.

The 7 left need majors Docusaurus pins against (tinypool 1 -> 2,
serialize-javascript 6 -> 7, uuid 8 -> 11) or a patch younger than the
cooldown (body-parser 1.20.9, 5 days): build-time / dev-server only —
uuid and body-parser sit under webpack-dev-server, which `docusaurus
build` never starts, and nothing they touch reaches the static site.
Left to upstream + Renovate rather than forced overrides.

Refs #1365

docs/package.json

@@ -11,19 +11,19 @@
     "serve": "docusaurus serve"
   },
   "dependencies": {
-    "@docusaurus/core": "^3.7.0",
-    "@docusaurus/preset-classic": "^3.7.0",
-    "@easyops-cn/docusaurus-search-local": "^0.55.1",
-    "@mdx-js/react": "^3.0.0",
-    "clsx": "^2.0.0",
-    "prism-react-renderer": "^2.3.0",
-    "react": "^18.0.0",
-    "react-dom": "^18.0.0"
+    "@docusaurus/core": "^3.10.2",
+    "@docusaurus/preset-classic": "^3.10.2",
+    "@easyops-cn/docusaurus-search-local": "^0.55.3",
+    "@mdx-js/react": "^3.1.1",
+    "clsx": "^2.1.1",
+    "prism-react-renderer": "^2.4.1",
+    "react": "^18.3.1",
+    "react-dom": "^18.3.1"
   },
   "devDependencies": {
-    "@docusaurus/module-type-aliases": "^3.7.0",
-    "@docusaurus/types": "^3.7.0",
-    "typescript": "~5.6.0"
+    "@docusaurus/module-type-aliases": "^3.10.2",
+    "@docusaurus/types": "^3.10.2",
+    "typescript": "~5.6.3"
   },
   "browserslist": {
     "production": [
@@ -40,5 +40,5 @@
   "engines": {
     "node": ">=18.0"
   },
-  "packageManager": "pnpm@10.12.1"
+  "packageManager": "pnpm@10.34.7"
 }