* fix: remediate dependency security advisories across workspaces * test: verify security patches without ad hoc dependency installs