Update dependencies

[josephjclark]

Clears out a bunch of security alerts.

Major diffs:

• Update undici
• Update common version (which was quite old and had an (irrelevant) security notice attached
• Update tsup (a major bump but no significant changes. Checked ws-worker build and it's the same)

[josephjclark]

The ava update is causing me real problems.

In a thing I don't really understand, ava 6.0 doesn't process.exit after tests have run - it waits for the test environment to finish all execution. I guess is good because it forces you to test your cleanup code.

But a lot of our cleaning code is failing, and some deep debugging with claude is putting me (rightly or wrongly) deep into phoenix code.

Not happy about the time this is now taking me. I may roll back the ava update and raise an issue just so that I can move on.