Bump dependencies: svelte, kit, ajv, devalue, hono, qs

- svelte 5.33.14 → 5.53.0
- @sveltejs/kit 2.50.2 → 2.52.2 (includes form amplification security fix)
- ajv 8.17.1 → 8.18.0
- devalue 5.6.2 → 5.6.3 (fixes __proto__ handling)
- hono 4.11.9 → 4.12.0
- qs 6.14.1 → 6.14.2

Replaces dependabot PRs #2147, #2146, #2142, #2140, #2139, #2118

Author: gary149