Update dependencies and fix what the new lint rules caught

Every package moves to its newest in-major version, plus React 19.3, @convex-dev/auth 0.0.96 and next-plausible 4. The backend declares @auth/core and generates sign-in codes without oslo, which @convex-dev/auth no longer pulls in. The UseSend patch now actually removes the crypto import Convex refuses to bundle. The stricter react-hooks and typescript-eslint rules flagged the carousel, chart, image crop and mobile hook, which now pass.

packages/ui/src/image-crop.tsx

@@ -294,10 +294,7 @@ export const ImageCropApply = ({
 
   if (asChild) {
     return (
-      <Slot.Root
-        onClick={handleClick}
-        {...(props as ComponentProps<typeof Slot.Root>)}
-      >
+      <Slot.Root onClick={handleClick} {...props}>
         {children}
       </Slot.Root>
     );
@@ -329,10 +326,7 @@ export const ImageCropReset = ({
 
   if (asChild) {
     return (
-      <Slot.Root
-        onClick={handleClick}
-        {...(props as ComponentProps<typeof Slot.Root>)}
-      >
+      <Slot.Root onClick={handleClick} {...props}>
         {children}
       </Slot.Root>
     );