fix(deps): update dependency ejs to v6

Release-Bump: major

compose.override.yml

@@ -36,7 +36,7 @@ services:
   # Dev mail catcher — Kratos recovery/verification emails land here (web UI on 8025).
   # kratos.yml points the courier at smtp://mailpit:1025; prod uses a real SMTP via env.
   mailpit:
-    image: axllent/mailpit:v1.30.6
+    image: axllent/mailpit:v1.30.5
     ports:
       - "8025:8025"
     restart: unless-stopped

package.json

@@ -19,7 +19,7 @@
   },
   "dependencies": {
     "@larvit/log": "2.3.0",
-    "ejs": "3.1.10",
+    "ejs": "6.0.1",
     "lucide-static": "1.18.0"
   },
   "devDependencies": {