build(deps): combined major bumps (web react19/vite8/router7, server fastify/drizzle)

Combina los bumps de Renovate abiertos en 1 PR (1 pasada de CI):
web: react 18→19, react-dom 18→19, react-router-dom 6→7, @dnd-kit/sortable 9→10,
  @vitejs/plugin-react 4→6, vite 6→8, @types/react 18→19
server: @fastify/cors 10→11, @fastify/static 8→9, drizzle-orm 0.36→0.45, drizzle-kit 0.28→0.31, vitest 2→4

EXCLUIDO typescript v6 (#6): salto 5→6 rompe tsc, queda como duda.
Verificado local (node:24): server 'tsc' OK; web 'tsc && vite build' OK. Sin cambios de código.
Sustituye PRs #1,#2,#3,#4,#7,#8,#9,#11,#12,#13.

web/package.json

@@ -9,18 +9,18 @@
   },
   "dependencies": {
     "@dnd-kit/core": "^6.3.1",
-    "@dnd-kit/sortable": "^9.0.0",
+    "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "react-router-dom": "^6.28.0",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0",
+    "react-router-dom": "^7.0.0",
     "socket.io-client": "^4.8.1"
   },
   "devDependencies": {
-    "@types/react": "^18.3.12",
-    "@types/react-dom": "^18.3.1",
-    "@vitejs/plugin-react": "^4.3.4",
+    "@types/react": "^19.0.0",
+    "@types/react-dom": "^19.0.0",
+    "@vitejs/plugin-react": "^6.0.0",
     "typescript": "^5.7.2",
-    "vite": "^6.0.3"
+    "vite": "^8.0.0"
   }
 }