Update dependencies and fix what the new lint rules caught

Every package moves to its newest in-major version, plus React 19.3, @convex-dev/auth 0.0.96 and next-plausible 4. The backend declares @auth/core and generates sign-in codes without oslo, which @convex-dev/auth no longer pulls in. The UseSend patch now actually removes the crypto import Convex refuses to bundle. The stricter react-hooks and typescript-eslint rules flagged the carousel, chart, image crop and mobile hook, which now pass.

packages/backend/package.json

@@ -26,9 +26,10 @@
     "with-env": "sh ../../scripts/with-env ${INFISICAL_ENV:-dev} --"
   },
   "dependencies": {
+    "@auth/core": "^0.41.3",
     "@oslojs/crypto": "^1.0.1",
-    "@react-email/components": "1.0.10",
-    "@react-email/render": "^2.0.4",
+    "@react-email/components": "1.0.12",
+    "@react-email/render": "^2.1.0",
     "convex": "catalog:convex",
     "react": "catalog:react19",
     "react-dom": "catalog:react19",