build(deps): bump react-router from 7.15.1 to 7.18.2 in /frontend (#733)

Closes four open Dependabot advisories, all patched in 7.18.0:
- Unauthenticated DoS via inefficient route matching
- Open redirect via backslash in <Link>/useNavigate (CVE-2025-68470 bypass)
- Arbitrary constructor injection in deserializeErrors()
- RSCErrorHandler missing protocol validation (XSS)

Supersedes #726, which proposed the 8.3.0 major. v8 is not required for
any of these fixes and would additionally impose Node >=22.22.0,
React >=19.2.7, ESM-only distribution and an ES2022 target.

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

frontend/package-lock.json

@@ -26,7 +26,7 @@
         "react-icons": "^5.5.0",
         "react-intersection-observer": "^10.0.3",
         "react-modern-drawer": "^1.4.0",
-        "react-router": "^7.13.0",
+        "react-router": "^7.18.2",
         "react-select": "^5.10.2",
         "swagger-ui-react": "^5.31.2",
         "uuid": "^14.0.0"
@@ -11620,9 +11620,9 @@
       }
     },
     "node_modules/react-router": {
-      "version": "7.15.1",
-      "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.15.1.tgz",
-      "integrity": "sha512-R8rl9HhgikFYoPJymnUtPXWbnDb3oget6lQnfIoupbt61aT9aOhRkDsY2XRhZRyX1Z/8a5sL74fXmFNm3NRK5A==",
+      "version": "7.18.2",
+      "resolved": "https://registry.npmjs.org/react-router/-/react-router-7.18.2.tgz",
+      "integrity": "sha512-aUVMjFm3GAPTTZL7oYr5E7ETiqfQCHRLH+B+5afnICvf0r7kkK4eR6SMuwbSTJw/7t+12khT/Kahij49fqOCIg==",
       "license": "MIT",
       "dependencies": {
         "cookie": "^1.0.1",

frontend/package.json

@@ -48,7 +48,7 @@
     "react-icons": "^5.5.0",
     "react-intersection-observer": "^10.0.3",
     "react-modern-drawer": "^1.4.0",
-    "react-router": "^7.13.0",
+    "react-router": "^7.18.2",
     "react-select": "^5.10.2",
     "swagger-ui-react": "^5.31.2",
     "uuid": "^14.0.0"