fix(security): upgrade Remix packages 2.1.0 → 2.17.3

Addresses CVE-2026-22029 (XSS via open redirects in loaders/actions).

Upgraded packages:
- @remix-run/express: 2.1.0 → 2.17.3
- @remix-run/node: 2.1.0 → 2.17.3
- @remix-run/react: 2.1.0 → 2.17.3
- @remix-run/router: 1.15.3 → 1.23.2
- @remix-run/serve: 2.1.0 → 2.17.3
- @remix-run/server-runtime: 2.1.0 → 2.17.3
- @remix-run/dev: 2.1.0 → 2.17.3
- @remix-run/eslint-config: 2.1.0 → 2.17.3
- @remix-run/testing: 2.1.0 → 2.17.3

Also updated tar-fs override for new @remix-run/dev version.

Author: D-K-P

apps/webapp/package.json

@@ -100,12 +100,12 @@
     "@react-aria/datepicker": "^3.9.1",
     "@react-stately/datepicker": "^3.9.1",
     "@react-types/datepicker": "^3.7.1",
-    "@remix-run/express": "2.1.0",
-    "@remix-run/node": "2.1.0",
-    "@remix-run/react": "2.1.0",
-    "@remix-run/router": "^1.15.3",
-    "@remix-run/serve": "2.1.0",
-    "@remix-run/server-runtime": "2.1.0",
+    "@remix-run/express": "2.17.3",
+    "@remix-run/node": "2.17.3",
+    "@remix-run/react": "2.17.3",
+    "@remix-run/router": "^1.23.2",
+    "@remix-run/serve": "2.17.3",
+    "@remix-run/server-runtime": "2.17.3",
     "@remix-run/v1-meta": "^0.1.3",
     "@s2-dev/streamstore": "^0.17.2",
     "@sentry/remix": "9.46.0",
@@ -228,9 +228,9 @@
     "@internal/clickhouse": "workspace:*",
     "@internal/replication": "workspace:*",
     "@internal/testcontainers": "workspace:*",
-    "@remix-run/dev": "2.1.0",
-    "@remix-run/eslint-config": "2.1.0",
-    "@remix-run/testing": "^2.1.0",
+    "@remix-run/dev": "2.17.3",
+    "@remix-run/eslint-config": "2.17.3",
+    "@remix-run/testing": "^2.17.3",
     "@sentry/cli": "2.50.2",
     "@swc/core": "^1.3.4",
     "@swc/helpers": "^0.4.11",

package.json

@@ -86,7 +86,7 @@
     "overrides": {
       "typescript": "5.5.4",
       "express@^4>body-parser": "1.20.3",
-      "@remix-run/dev@2.1.0>tar-fs": "2.1.3",
+      "@remix-run/dev@2.17.3>tar-fs": "2.1.3",
       "testcontainers@10.28.0>tar-fs": "3.0.9",
       "form-data@^2": "2.5.4",
       "form-data@^3": "3.0.4",