Fix blog build + clear 14 dependabot advisories

Build was failing because the new MDX post tried to `import` the
SuchMoonLaunchStoreButtons component — next-mdx-remote/rsc doesn't
support imports inside .mdx; components must be passed via the
`components` prop. Wire the helper into [slug]/page.tsx and drop the
import line from the .mdx.

Dependency bumps to clear the 14 outstanding Dependabot advisories
(9 high, 4 moderate, 1 low):
- apps/web/next: ^15.5.15 → ^15.5.18 (covers 12 next.js advisories)
- pnpm overrides: pin postcss ^8.5.14 (clears 1117015 XSS via </style>)
- pnpm overrides: pin fast-uri ^3.1.2 (clears 1117870 + 1117884 path
  traversal / host confusion)

pnpm audit: 14 vulnerabilities → 0.

apps/web/content/blog/such-moon-launch-release.mdx

@@ -5,8 +5,6 @@ excerpt: "The expanded re-release of the very first game I ever wrote. 11 levels
 draft: false
 ---
 
-import { SuchMoonLaunchStoreButtons } from "@/components/store-buttons";
-
 **Such Moon Launch** is now submitted to [Google Play](https://play.google.com/store/apps/details?id=com.suchsoftware.suchmoonlaunch) and the App Store, and live on [the web](https://moonlaunch.such.software). Apple and Play store listings will go live as the review queues clear.
 
 <SuchMoonLaunchStoreButtons />