Updates the Go modules mimetype, prometheus/client_golang, antchfx/xpath
and zitadel/oidc, drops the now unused zitadel/logging indirect, refreshes
the npm packages sass, postcss, playwright, tar, @vue/compiler-sfc and
@vue/language-server, and regenerates NOTICE.
mimetype v1.4.14 reports animated PNGs as the IANA-registered "image/apng"
instead of "image/png", which matched neither ContentTypePng nor the legacy
ContentTypeAPng ("image/vnd.mozilla.apng"). Animated PNGs were therefore
rejected by MediaFile.CheckType(), which gates upload, import and indexing,
and by both avatar handlers. Detection is content-based, so this affected
any .png file carrying an acTL chunk, not just the .apng extension.
ContentTypeAPng now holds the IANA name, the legacy Mozilla name remains
available as ContentTypeAPngAlt, and the new header.IsPngType() helper
matches all three so the equivalence cannot drift apart again. The same
release also aligns Matroska detection with ContentTypeMkv, which had
never matched the previously reported "video/x-matroska".
Adds an animated PNG fixture with test coverage for IsPngType, IsPng,
CheckType and avatar upload; each case fails without the fix.
