test: stabilize pre-deployment gates

Remove the redundant timing-dependent native Argon2 concurrency test while retaining native vector coverage and deterministic limiter coverage. Refresh stale deployment and browser contracts, make release scripts portable across Bash/macOS, and update production dependency locks for resolved security advisories.

scripts/build-dwh-auth.sh

@@ -27,11 +27,7 @@ while (($#)); do
 done
 
 case "$output" in
-  # Explicit paths must already be canonical; the default is canonical by construction.
-  /*)
-    canonical_output=$(realpath -m "$output")
-    [[ "$canonical_output" == "$output" ]] || { echo "build-dwh-auth: output must be canonical" >&2; exit 2; }
-    ;;
+  /*) ;;
   *)
     echo "build-dwh-auth: output must be an absolute canonical directory" >&2
     exit 2
@@ -57,7 +53,8 @@ fi
   exit 2
 }
 leaf=$(basename "$output")
-[[ "$parent/$leaf" == "$output" ]] || {
+canonical_parent=$(cd "$parent" && pwd -P)
+[[ "${canonical_parent%/}/$leaf" == "$output" ]] || {
   echo "build-dwh-auth: output must be canonical" >&2
   exit 2
 }