Dependency maintenance pass — svelte + @types/node patch/major bumps, workspace isolation fix

Routine patch/minor sweep on top of the Astro 7 upgrade. Also fixed a real bug: pnpm was leaking installs into the parent astro-knots workspace and corrupting its lockfile.