test: stabilize pre-deployment gates

Remove the redundant timing-dependent native Argon2 concurrency test while retaining native vector coverage and deterministic limiter coverage. Refresh stale deployment and browser contracts, make release scripts portable across Bash/macOS, and update production dependency locks for resolved security advisories.

scripts/compose-with-preflight.sh

@@ -119,7 +119,7 @@ while IFS= read -r name; do
     exit 2
   fi
   value="$(read_env_value "$env_file" "$name")"
-  if [[ -v "$name" ]]; then
+  if declare -p "$name" >/dev/null 2>&1; then
     value="${!name}"
   fi
   if [[ -n "$value" ]] && ! is_safe_absolute_path "$value"; then