chore: patch deps, CSP style nonces, otplib 13, and PR CI

Co-authored-by: Cursor <[email protected]>

src/lib/permissions.ts

@@ -11,8 +11,6 @@ import { prisma } from "./prisma";
 // Re-export PERMS from the standalone file (safe for client components)
 export { PERMS } from "./permission-slugs";
 
-import { PERMS } from "./permission-slugs";
-
 // ── Permission Set ──────────────────────────────────────────────────
 
 export type { PermissionSet } from "@/types/admin";