build: consolidate foundations and dependency hardening (1/6)

[cerede2000]

Summary

PR 1/6 of the complete tested main → integration contribution train.

This deliberately front-loads the foundations and dependency/security debt so every later PR is based on the hardened stack:

• consolidates the work formerly spread across closed PRs fix(auth): propagate the authenticated user to the request context #196–fix(images): searching no longer crashes the page on untagged images #219;
• authentication, host persistence, stack status, settings and file/editor fixes;
• volume/image/stats functionality and Docker stream/memory corrections;
• Docker events, background actions, logs, tabs and Compose operations;
• hardened Docker build, refreshed Go/Node dependency graphs and vulnerability gates;
• Vite 8, TypeScript 6, MUI 9, Electron 43, xterm 6 and ESLint 10 migration;
• frontend lint/hook cleanup and SSH/file-tree reliability fixes.

Why

The former PR set was too fragmented. This one curated snapshot replaces the noisy merge history and ensures dependency remediation lands before the feature layers that rely on it.

Validation

• local frontend lint: passed
• local production frontend build: passed
• dedicated Go/build/vet/test, vulnerability and frontend workflow: https://github.com/cerede2000/dockman/actions/runs/29796714295

Series mechanics

Based directly on upstream main (e34241e). PRs 2–6 are cumulative drafts; after each merge, the next branch will be rebased onto updated upstream main so only its own lot remains.

[vercel]

Someone is attempting to deploy a commit to the r334's projects Team on Vercel.

A member of the Team first needs to authorize it.