fix(security): bump out-of-SLO react-router to 6.30.4

[akkikumar72]

• Pin out-of-SLO transitive react-router 6.30.3 → 6.30.4 (CVE-2026-40181)
• Selective resolution keeps react-router@5.3.4 untouched; @remix-run/router already pinned at 1.23.3
• Checks: typecheck + test:ci (21) pass

[Copilot]

Pull request overview

This PR addresses a security concern by forcing the project’s transitive react-router v6 dependency to update from 6.30.3 to 6.30.4 (per the CVE referenced in the PR description), while keeping the existing react-router@5.3.4 line intact.

Changes:

• Updated the lockfile entry for react-router v6 to 6.30.4 (and its @remix-run/router dependency to 1.23.3).
• Added a Yarn resolutions rule to force any react-router@npm:6.30.3 requests to resolve to 6.30.4.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File	Description
yarn.lock	Updates the resolved react-router v6 package to 6.30.4 (and corresponding transitive router dependency).
package.json	Adds a selective resolutions override to pin react-router@npm:6.30.3 → 6.30.4 without impacting v5.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.