fix: patch dependabot vulnerabilities in frontends/postgres

- npm overrides: minimatch → 10.2.4, tar → 7.5.11, esbuild → >=0.25.0
- Update drizzle-kit to latest
- 4 moderate esbuild vulns remain (drizzle-kit/@esbuild-kit transitive, no upstream fix)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontends/postgres/package.json

@@ -66,7 +66,11 @@
     "react": "^19.2.4",
     "react-dom": "^19.2.4",
     "minimatch": "10.2.4",
-    "tar": "7.5.11"
+    "tar": "7.5.11",
+    "esbuild": ">=0.25.0",
+    "@esbuild-kit/core-utils": {
+      "esbuild": ">=0.25.0"
+    }
   },
   "devDependencies": {
     "@antfu/eslint-config": "^7.4.3",
@@ -81,6 +85,7 @@
     "@next/bundle-analyzer": "^16.1.6",
     "@next/eslint-plugin-next": "^16.1.6",
     "@playwright/test": "^1.58.2",
+    "@sentry/nextjs": "^10.39.0",
     "@spotlightjs/spotlight": "^4.10.0",
     "@storybook/addon-a11y": "^10.2.10",
     "@storybook/addon-docs": "^10.2.10",
@@ -101,14 +106,17 @@
     "dotenv-cli": "^11.0.0",
     "drizzle-kit": "^0.31.9",
     "eslint": "^10.0.1",
+    "eslint-config-next": "^16.1.6",
     "eslint-plugin-format": "^2.0.1",
     "eslint-plugin-jsx-a11y": "^6.10.2",
     "eslint-plugin-playwright": "^2.7.0",
+    "eslint-plugin-react": "^7.37.5",
     "eslint-plugin-react-hooks": "^7.0.1",
     "eslint-plugin-react-refresh": "^0.5.0",
     "eslint-plugin-storybook": "^10.2.10",
     "eslint-plugin-tailwindcss": "^4.0.0-beta.0",
     "get-db": "^0.13.0",
+    "jest": "^30.2.0",
     "knip": "^5.84.1",
     "lefthook": "^2.1.1",
     "npm-run-all2": "^8.0.4",
@@ -122,11 +130,7 @@
     "typescript": "5.9.3",
     "vite-tsconfig-paths": "^6.1.1",
     "vitest": "^4.0.18",
-    "vitest-browser-react": "^2.0.5",
-    "eslint-config-next": "^16.1.6",
-    "eslint-plugin-react": "^7.37.5",
-    "jest": "^30.2.0",
-    "@sentry/nextjs": "^10.39.0"
+    "vitest-browser-react": "^2.0.5"
   },
   "release": {
     "branches": [