chore: update dependencies

[dobby-coder]

Patch/minor bumps from the 2026-05-24 dep-update-scan.

Bumps applied

• @e4a/pg-js 1.8.0 → 1.10.0
• @sveltejs/kit 2.60.1 → 2.61.1
• libphonenumber-js 1.13.2 → 1.13.3
• prettier-plugin-svelte 4.0.0 → 4.0.1
• sass 1.99.0 → 1.100.0
• vite 8.0.13 → 8.0.14

Deferred

• svelte-preprocess 6.0.3 → 6.0.4 — 6.0.4 breaks vite-plugin-svelte's preprocess step. Tracked in chore: bump svelte-preprocess 6.0.3 -> 6.0.4 (deferred from #236) #238.

Verification

• npm ci --legacy-peer-deps (unchanged install path).
• npm run build — green.
• npm run check — 0 errors, 0 warnings.
• npm run lint — green.
• npm test not run — the only test file is a stale SvelteKit boilerplate stub that would fail regardless of these bumps. CI does not invoke Playwright.

Closes #236

[dobby-coder]

Dobby rule-compliance check: tightened the PR body.

• no-justification-paragraphs-for-simple-changes: collapsed the multi-paragraph "Deferred" section (peer-dep diff, dynamic-import diff snippet, error block, follow-up promise) into a single bullet pointing at chore: bump svelte-preprocess 6.0.3 -> 6.0.4 (deferred from #236) #238. The full technical context already lives in chore: bump svelte-preprocess 6.0.3 -> 6.0.4 (deferred from #236) #238 — duplicating it here is exactly the "spiel" the rule (and the PG_API_KEY incident on postguard-examples#31) warns against.
• promised-vs-delivered: replaced "Will open a follow-up issue" with a direct link to chore: bump svelte-preprocess 6.0.3 -> 6.0.4 (deferred from #236) #238, which was already opened — the promise was kept, but the PR body needs to reflect that, not the unfulfilled-sounding future tense.

Other rules checked (compliant or N/A): conventional-commit-pr-titles, pr-close-issue-keywords, consolidate-overlapping-prs, consolidation-pr-list-issues-not-prs, default-prs-to-ready, flip-drafts-after-ci, design-ai-slop-tells, docs-drift-check, tests-required-on-fixes, check-dep-is-used-before-bumping, cross-repo-link-format, close-tracking-issues-when-bumps-merge (post-merge), plus repo-specific notes (prettier-plugin-svelte {@const} regression, pg-js notify API, kit ≥ 2.59 + @types/node).

[dobby-coder]

Dobby sees the approval trigger and checked the state of this pull request: it is already merged, the review has no comments asking Dobby to change anything, and the patch/minor bumps here do not match any open major-bump tracker. So Dobby has nothing more to do here and is exiting quietly.