fix: pin package versions to clear StepSecurity cooldown check

@aws-sdk/client-s3@3.1118.0 and the typescript-eslint 8.68.0 family
(pulled in transitively via eslint-config-next) were published within
StepSecurity's npm package cooldown window, failing the required CI
check. Pinned to 3.1116.0 and 8.67.0 respectively — both released
several days earlier and still satisfy the vulnerability fix and
eslint-config-next's peer range.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: danyalprout