fix(security): Mermaid updated due dependabot warnings

[WebReflection]

Update Mermaid from 11.15.0 to 11.17.2 to resolve open Dependabot security advisories.

Affected packages:

• @opencode-ai/ui
• @kilocode/kilo-docs

Resolves advisories including:

• GHSA-rhh3-jpg6-66xh: Mermaid radar diagrams are vulnerable to DoS
• GHSA-c4c3-pg64-4m4v: Mermaid configuration APIs allow prototype pollution
• GHSA-6x64-9x62-fgx: Mermaid allows CSS injection applying to sibling elements of the diagram
• GHSA-3rrr-jr9j-h3q3: Mermaid Architecture diagrams are vulnerable to prototype pollution
• GHSA-2v8p-3f2j-5mp7: Mermaid XY Charts are vulnerable to an infinite loop DoS

Verification:

• bun run --cwd packages/ui test: 160 pass
• bun run --cwd packages/kilo-docs test: 22 pass
• bun run --cwd packages/ui typecheck: passed
• bun run --cwd packages/kilo-docs typecheck: passed
• bun run lint: 0 errors

[kilo-code-bot]

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (5 files)

• .changeset/mermaid-security-update.md
• bun.lock
• packages/kilo-docs/package.json
• packages/kilo-docs/pnpm-lock.yaml
• packages/ui/package.json

---

_{Reviewed by grok-4.6 · Input: 191.5K · Output: 6.4K · Cached: 158.8K}

_{Review guidance: REVIEW.md from base branch main}

[marius-kilocode]

@WebReflection Please smoke test that mermaid generation still works in the extension