Harden npm dependencies for a clean audit and reliable Docker builds.

Regenerate the lockfile, bump googleapis, and override vulnerable transitive packages so npm ci and Hub builds succeed.

Co-authored-by: Cursor <cursoragent@cursor.com>

package.json

@@ -19,7 +19,7 @@
     "@tailwindcss/typography": "^0.5.20",
     "bullmq": "^5.34.5",
     "ffmpeg-static": "^5.3.0",
-    "googleapis": "^144.0.0",
+    "googleapis": "^173.0.0",
     "ioredis": "^5.11.1",
     "music-metadata": "^11.13.0",
     "next": "^15.1.3",
@@ -34,11 +34,19 @@
     "concurrently": "^9.2.0",
     "eslint": "^9.17.0",
     "eslint-config-next": "^15.1.3",
-    "postcss": "^8.4.49",
+    "postcss": "^8.5.18",
     "prisma": "^6.1.0",
     "tailwindcss": "^3.4.17",
     "tsx": "^4.19.2",
     "typescript": "^5.7.2"
+  },
+  "overrides": {
+    "uuid": "^11.1.1",
+    "cookie": "^0.7.2",
+    "postcss": "^8.5.18",
+    "sharp": "^0.35.3",
+    "@auth/core": "^0.41.3",
+    "brace-expansion": "^5.0.8",
+    "glob": "^11.0.0"
   }
 }
-