fix(types): drop the 2017 @types/date-fns stub shadowing date-fns 3 types

The tsconfig "types" array forced @types/date-fns@2.5.3 — a deprecated stub
for date-fns v2.5 — over the real types shipped by date-fns 3.6, producing
phantom errors everywhere dates are formatted (Locale unknown, format()
refusing its options argument, parseISO missing). Removing the stub and the
types entry (plus the unused node-fetch entry) clears them at the root.

Also applies the non-breaking npm audit fixes: 16 production vulnerabilities
down to 2 (drizzle-orm and xlsx, both needing review — see commit history).

TypeScript errors: 261 → 177.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FHdE9nEh8zHhQNGpCgrtYe

tsconfig.json

@@ -34,9 +34,7 @@
       "vite/client",
       "express",
       "react",
-      "react-dom",
-      "node-fetch",
-      "date-fns"
+      "react-dom"
     ],
     "paths": {
       "@/*": [