Update dependencies and fix what the new lint rules caught

Every package moves to its newest in-major version, plus React 19.3, @convex-dev/auth 0.0.96 and next-plausible 4. The backend declares @auth/core and generates sign-in codes without oslo, which @convex-dev/auth no longer pulls in. The UseSend patch now actually removes the crypto import Convex refuses to bundle. The stricter react-hooks and typescript-eslint rules flagged the carousel, chart, image crop and mobile hook, which now pass.

packages/backend/convex/custom/auth/providers/usesend.ts

@@ -1,6 +1,5 @@
 import type { EmailConfig, EmailUserConfig } from '@auth/core/providers/email';
 import { generateRandomString, RandomReader } from '@oslojs/crypto/random';
-import { alphabet } from 'oslo/crypto';
 import { UseSend } from 'usesend-js';
 
 export default function UseSendProvider(config: EmailUserConfig): EmailConfig {
@@ -17,7 +16,7 @@ export default function UseSendProvider(config: EmailUserConfig): EmailConfig {
           crypto.getRandomValues(bytes as Uint8Array<ArrayBuffer>);
         },
       };
-      return generateRandomString(random, alphabet('0-9'), 6);
+      return generateRandomString(random, '0123456789', 6);
     },
 
     sendVerificationRequest: async (params) => {