chore: enforce 3 day dependency maturity gate [WPB-22420]

[markbrockhoff]

WPB-22420 [Web] General maintenance ticket for PR merges

Pull Request

Summary

This enforces dependency versions to be at least 3 days old before they are installed into the project. This is an easy prevention for supply chain attacks, e.g. the recent shai-hulud ones in the npm ecosystem.
Dependencies of the @wireapp/* scope are excluded from this rule.

---

Security Checklist (required)

• External inputs are validated & sanitized on client and/or server where applicable.
• API responses are validated; unexpected shapes are handled safely (fallbacks or errors).
• No unsafe HTML is rendered; if unavoidable, sanitization is applied and documented where it happens.
• Injection risks (XSS/SQL/command) are prevented via safe APIs and/or escaping.

Accessibility (required)

• I have read and this PR upholds our Accessibility Best Practices.

Standards Acknowledgement (required)

• I have read and this PR upholds our Coding Standards and Tech Radar Choices.

---

Screenshots or demo (if the user interface changed)

Notes for reviewers

• Trade-offs:
• Follow-ups (linked issues):
• Linked PRs (e.g. web-packages):

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 45.39%. Comparing base (0f1c946) to head (eef1345).
⚠️ Report is 1 commits behind head on dev.

Additional details and impacted files

@@            Coverage Diff             @@
##              dev   #20499      +/-   ##
==========================================
- Coverage   45.39%   45.39%   -0.01%     
==========================================
  Files        1638     1638              
  Lines       40374    40374              
  Branches     8337     8337              
==========================================
- Hits        18327    18326       -1     
  Misses      20112    20112              
- Partials     1935     1936       +1     

Flag	Coverage Δ
app_webapp	43.57% <ø> (-0.01%)	⬇️
lib_api_client	50.50% <ø> (ø)
lib_core	58.86% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.
see 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

🔗 Download Full Report Artifact

🧪 Playwright Test Summary

• ✅ Passed: 10
• ❌ Failed: 0
• ⏭ Skipped: 4
• 🔁 Flaky: 0
• 📊 Total: 14
• ⏱ Total Runtime: 470.0s (~ 7 min 50 sec)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud