site: pin deps to Nexus-available versions + regenerate lockfile via Nexus

The Docker build 404'd on @types/react@19.2.17 (not in the Nexus mirror; npmjs
is blocked upstream). Pin shared deps to the exact versions the main app uses
(@types/react 19.2.16, etc.) and regenerate package-lock.json against the Nexus
registry so every resolved tarball is one Nexus can serve.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

site/package.json

@@ -9,21 +9,21 @@
     "lint": "eslint"
   },
   "dependencies": {
-    "@fontsource-variable/vazirmatn": "^5.2.8",
-    "clsx": "^2.1.1",
-    "lucide-react": "^1.17.0",
+    "@fontsource-variable/vazirmatn": "5.2.8",
+    "clsx": "2.1.1",
+    "lucide-react": "1.17.0",
     "next": "16.2.7",
     "react": "19.2.4",
     "react-dom": "19.2.4"
   },
   "devDependencies": {
-    "@tailwindcss/postcss": "^4",
-    "@types/node": "^20",
-    "@types/react": "^19",
-    "@types/react-dom": "^19",
-    "eslint": "^9",
+    "@tailwindcss/postcss": "4.3.0",
+    "@types/node": "20.19.41",
+    "@types/react": "19.2.16",
+    "@types/react-dom": "19.2.3",
+    "eslint": "9.39.4",
     "eslint-config-next": "16.2.7",
-    "tailwindcss": "^4",
-    "typescript": "^5"
+    "tailwindcss": "4.3.0",
+    "typescript": "5.9.3"
   }
 }