chore(deps): update minor and patch dependencies

Bump every direct dependency to its newest same-major release, moving the
embedpdf patches and packageExtensions to 2.15.1 and deduping the lockfile.
Hold jsdom at 30.0 because 30.1 breaks vitest's URL.createObjectURL shim,
and skip releases still inside pnpm's minimum release age.

.github/dependabot.yml

@@ -21,6 +21,9 @@ updates:
       # @nestjs/testing must stay on the same major as @nestjs/common and @nestjs/core
       - dependency-name: "@nestjs/testing"
         update-types: ["version-update:semver-major"]
+      # jsdom 30.1 hides the Blob impl symbol that vitest's URL.createObjectURL shim reads (still true in vitest 5.0)
+      - dependency-name: "jsdom"
+        update-types: ["version-update:semver-minor"]
     groups:
       production-dependencies:
         dependency-type: "production"