chore: R11 phase-boundary currency check — astro 7.2.9, TypeScript 6.0.3

Run at the step 1 → step 2 boundary, which is what R11 asks for rather than
waiting for something to break. `npm view <pkg> version` across all fourteen
pins; two were stale.

- astro ^7.2.7 → ^7.2.9. Patch. 7.2.8 published 2026-08-26, 7.2.9 2026-08-27.
- typescript ^5.9.3 → ^6.0.3. A full major behind, and installable.

TypeScript 7.0.2 is `latest` and is NOT taken — a deliberate hold with a
checkable reason, per R11. Both peer ranges exclude it:

  typescript-eslint@8.68.0  peer typescript >=4.8.4 <6.1.0
  @astrojs/check@0.9.10     peer typescript ^5.0.0 || ^6.0.0

6.0.3 is the newest stable both accept. Recorded in AGENTS.md §7 so the hold
is visible rather than looking like an oversight.

@lhci/cli is still 0.15.1 — unchanged, and it is not re-added here. R11's
re-add trigger is step 7.

Verified, not asserted: `npx tsc --version` 6.0.3 · `npm run check` 0 errors /
0 warnings / 0 hints · `npm run lint` clean (ESLint + Prettier) · `npm run
build` complete · `npm audit` 0 vulnerabilities.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0148NztQskLKKApP5SzAA78e

package.json

@@ -20,7 +20,7 @@
   "dependencies": {
     "@astrojs/mdx": "^7.0.8",
     "@astrojs/sitemap": "^3.7.3",
-    "astro": "^7.2.7",
+    "astro": "^7.2.9",
     "sharp": "^0.35.4"
   },
   "devDependencies": {
@@ -32,7 +32,7 @@
     "globals": "^17.11.0",
     "prettier": "^3.9.6",
     "prettier-plugin-astro": "^0.14.1",
-    "typescript": "^5.9.3",
+    "typescript": "^6.0.3",
     "typescript-eslint": "^8.68.0"
   },
   "overrides": {