fix(dashboard): sync lockfile and bump three to satisfy model-viewer peer

npm ci failed in Docker because package-lock.json was stale (missing three
and the workbox/PWA deps) and @google/model-viewer@4.2.0 requires three@^0.182.0
while package.json pinned ^0.163.0. Bumped three and regenerated the lockfile.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

web/dashboard/package.json

@@ -13,7 +13,7 @@
   },
   "dependencies": {
     "@google/model-viewer": "^4.2.0",
-    "three": "^0.163.0",
+    "three": "^0.182.0",
     "@microsoft/signalr": "^8.0.7",
     "@radix-ui/react-alert-dialog": "^1.1.15",
     "@radix-ui/react-dropdown-menu": "^2.1.2",