fix: resolve all CI lint errors and security audit failures (v0.10.9 Beta)

- DevicesPage: add statusFilter + typeFilter to filtered useMemo deps (was a real bug — filter chips had no effect until unrelated re-render)
- DevicesPage: refactor cpuHistories useMemo to pure Object.fromEntries form
- DashboardPage: suppress react-hooks/purity for intentional Date.now() chart domain
- Sidebar: move GroupHeader from inline arrow fn to module-scope named function (fixes react-hooks/static-components)
- axios: bump ^1.6.5 → ^1.16.0 to clear high-severity CVEs (prototype pollution, CRLF injection, NO_PROXY bypass)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

frontend/src/pages/DashboardPage.tsx

@@ -274,14 +274,13 @@ function SummaryView(props: Record<string, any>) {
     router:      { label: 'Routers',     color: 'var(--violet)' },
   };
 
-  const chartDomain = useMemo<[number, number]>(
-    () => {
-      const ranges: Record<string, number> = { '1h': 1, '6h': 6, '24h': 24, '7d': 168 };
-      const hrs = ranges[chartRange] ?? 24;
-      return [Date.now() - hrs * 60 * 60 * 1000, Date.now()];
-    },
-    [chartRange, clientsOverTime] // eslint-disable-line react-hooks/exhaustive-deps
-  );
+  const chartDomain: [number, number] = (() => {
+    const ranges: Record<string, number> = { '1h': 1, '6h': 6, '24h': 24, '7d': 168 };
+    const hrs = ranges[chartRange] ?? 24;
+    // eslint-disable-next-line react-hooks/purity
+    const now = Date.now();
+    return [now - hrs * 60 * 60 * 1000, now];
+  })();
 
   return (
     <div className="space-y-4">