fix(release): clear dependency audit gate

[josedaniel-dev]

Summary

• upgrade the dashboard from React Router 6.30.4 to 7.18.2, the first release outside the affected advisory ranges
• regenerate the dashboard lockfile
• correct the published-backend installation command to include the SQLite extra used by the default configuration

Why

The scheduled dependency audit reports two moderate React Router vulnerabilities. A clean PyPI validation also showed that the documented plain backend install cannot import under the default SQLite configuration because aiosqlite is optional.

Validation

• dashboard: npm ci
• dashboard: npm audit --audit-level=moderate — 0 vulnerabilities
• dashboard: npm run build — PASS
• sdk/typescript: npm ci && npm audit --audit-level=moderate — 0 vulnerabilities
• clean Docker-in-Docker Compose build and startup from commit 7b64585
• backend health: healthy, database: ok, version: 0.1.1
• documented synthetic HTTP trace persisted and listed
• @magic-lab-studio/observer@0.1.1 installed in a new npm project and exported a synthetic SDK trace
• all three Python distributions 0.1.1 installed in a new Python 3.13 virtualenv
• Python SDK and CLI passed; backend import passed after installing magic-lab-observer-backend[sqlite]==0.1.1

Remaining acceptance

Issue #20 intentionally requires a human who did not develop Observer to repeat the public README flow. This automated validation does not replace that final human check.