chore(deps): bump dependencies within their ranges

[the-simian]

• Root dev dependencies, in range: @biomejs/biome 2.5.14, @semantic-release/npm 13.2.0, semantic-release 25.0.9, @types/bun 1.4.2, fast-check 4.10.2, knip 6.37.0, publint 0.3.24.
• Demo dependencies, in range: vite 8.3.0, @vitejs/plugin-react 6.1.1, tailwindcss and @tailwindcss/vite 4.3.3, eslint 9.39.5, @typescript-eslint/parser 8.70.1, lucide-react 1.47.0, @babylonjs/core 9.27.1, shiki 4.4.3, tailwind-merge 3.7.0, @radix-ui/react-select 2.3.7.
• ci.yml: codecov/codecov-action v7.0.0 to v7.1.1, SHA verified against the upstream tag. Supersedes chore(deps): bump codecov/codecov-action from 7.0.0 to 7.1.1 in the actions group #68.

Not moved (majors, left for a separate pass): TypeScript 7 and React 19 in the demo, ESLint 10, eslint-plugin-react-hooks 7, @semantic-release/changelog 7, @semantic-release/git 11, @stryker-mutator/core 10.

Testing: every CI check step passes locally from a clean checkout with an empty Bun cache, and the demo builds in the deploy workflow's order.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (4487269) to head (cb4ed27).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##              main       #70   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           34        34           
  Lines         2555      2555           
=========================================
  Hits          2555      2555           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.