chore(deps): align resolutions and yarn.lock with @rancher/shell 3.0.14 (#1239)

* chore(deps): align resolutions and yarn.lock with @rancher/shell 3.0.14

yarn only applies resolutions from the root package.json, so the ones
@rancher/shell 3.0.14 declares never reached the extension. Copy them
over, use the **/ form for diff2html/diff since diff2html sits under
@rancher/shell here, and drop the cronstrue pin so the extension and the
shell both use the 3.9.0 the shell depends on.

Re-resolve yarn.lock against the shell's own lockfile so every shared
package lands on the version the shell ships, and semver and
@types/node follow the shell's versions too.

Signed-off-by: Marcelo Fukumoto <marcelo.fukumoto@suse.com>

* chore(deps): keep the cronstrue pin

cronstrue 3 describes @reboot, so the backup schedule form enabled Create
for it while Harvester's webhook rejects it. The dashboard itself runs
cronstrue 2.53.0 and the shell went back to that after 3.0.14, so keep
our 2.59.0 pin.

Signed-off-by: Marcelo Fukumoto <marcelo.fukumoto@suse.com>

---------

Signed-off-by: Marcelo Fukumoto <marcelo.fukumoto@suse.com>

package.json

@@ -29,21 +29,31 @@
   },
   "resolutions": {
     "@novnc/novnc": "1.7.0",
-    "@types/node": "25.9.6",
+    "@tootallnate/once": "^2.0.1",
+    "@types/lodash": "4.17.25",
+    "@types/node": "25.3.3",
+    "cookie": "0.7.2",
     "cronstrue": "2.59.0",
     "d3-color": "3.1.0",
+    "**/diff2html/diff": "5.2.2",
     "ejs": "3.1.10",
     "follow-redirects": "1.16.0",
     "glob": "7.2.3",
     "glob-parent": "6.0.2",
     "json5": "2.2.3",
-    "@types/lodash": "4.17.25",
+    "markdown-it": "14.3.1",
     "merge": "2.1.1",
     "node-forge": "1.4.0",
     "nth-check": "2.1.1",
+    "postcss": "8.5.26",
+    "postcss-selector-parser": "7.1.6",
     "qs": "6.16.0",
     "roarr": "7.21.7",
-    "semver": "7.8.5",
+    "semver": "7.5.4",
+    "serialize-javascript": "7.0.5",
+    "uuid": "11.1.1",
+    "webpack-dev-server": "5.2.6",
+    "ws": "8.21.0",
     "@vue/cli-service/html-webpack-plugin": "^5.0.0"
   },
   "scripts": {