fix(web): stop the sidebar update icon from rendering clipped (#282)

## Summary

- The sidebar update pill is a 32px `inline-grid` with `overflow:
hidden`. The hidden `nowrap` label shares the icon's grid cell, so the
track grew to the label's width, the icon was centred in that oversized
track, and the visible part was a clipped half green circle. The track
is now pinned with `grid-template-columns: minmax(0, 1fr)` and both
items get `min-width: 0`.
- Sidebar logo width reduced from 220px to 200px.
- `dist-web` bundle restaged.

## Test plan

- [x] `app-shell-contracts.test.ts` updated: new guards for the grid
track + `min-width: 0`, logo width pinned to 200px.
- [x] `pnpm run build:web`

<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit

* **Bug Fixes**
* Fixed the sidebar update notification icon so it remains fully visible
without clipping.
  * Improved update notification layout across different sidebar widths.

* **Style**
* Reduced the maximum sidebar logo width for a more balanced appearance.

* **Chores**
* Refreshed web assets and improved reliability of security audit
network requests.
<!-- end of auto-generated comment: release notes by coderabbit.ai -->

Author: elkaix

.changeset/sidebar-update-icon-clipped.md

@@ -0,0 +1,5 @@
+---
+"@pymodel/pythinker-code": patch
+---
+
+Show the sidebar update icon fully instead of a clipped half circle, and slightly shrink the sidebar logo.

.github/workflows/security.yml

@@ -25,6 +25,11 @@ jobs:
         with:
           node-version-file: .nvmrc
       - run: pnpm audit --json
+        env:
+          npm_config_fetch_timeout: 120000
+          npm_config_fetch_retries: 3
+          npm_config_fetch_retry_mintimeout: 20000
+          npm_config_fetch_retry_maxtimeout: 120000
 
   dependency-review:
     name: Dependency review

apps/pythinker-code/dist-web/.web-bundle-manifest.json

@@ -1,4 +1,4 @@
 {
-  "sourceHash": "ec0a2f164d8ce7b1beae37abae45b2de37e96de5c4f7b54e460eb1fc77996537",
+  "sourceHash": "135af31b82e0a89e3644936171b91c29d9880f1112d9b9046c4871da90618387",
   "sourceFileCount": 422
 }