ci: track frontend lockfile and patch web deps

.gitignore

@@ -1,5 +1,6 @@
 node_modules
 package-lock.json
+!platform/web/package-lock.json
 .env
 /ops/shared
 /ops/*.log

platform/web/package.json

@@ -13,8 +13,8 @@
     "@prisma/client": "5.20.0",
     "date-fns": "4.1.0",
     "date-fns-tz": "3.2.0",
-    "next": "15.5.7",
-    "next-auth": "5.0.0-beta.25",
+    "next": "15.5.19",
+    "next-auth": "5.0.0-beta.31",
     "react": "19.0.0",
     "react-dom": "19.0.0",
     "recharts": "2.15.0",
@@ -25,7 +25,7 @@
     "@types/react": "19.0.1",
     "@types/react-dom": "19.0.1",
     "autoprefixer": "10.4.20",
-    "eslint": "9.13.0",
+    "eslint": "9.39.4",
     "eslint-config-next": "15.0.3",
     "postcss": "8.4.47",
     "prisma": "5.20.0",