fix: dompurify 2.5.9->3.4.5 (XSS), emojibase chunk, husky prepare

- dompurify updated to 3.4.5 to fix 7 XSS/prototype-pollution CVEs
- emojibase-data added to manualChunks: splits 856 kB out of the main
  bundle, reducing it from 1.8 MB to 932 kB
- husky prepare script updated from deprecated "husky install" to "husky"

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

package.json

@@ -16,7 +16,7 @@
     "check:prettier": "prettier --check .",
     "fix:prettier": "prettier --write .",
     "typecheck": "tsc --noEmit",
-    "prepare": "husky install",
+    "prepare": "husky",
     "commit": "git-cz",
     "semantic-release": "semantic-release",
     "postinstall": "node scripts/patch-folds.mjs"
@@ -74,6 +74,7 @@
     "@tanstack/react-query": "5.24.1",
     "@tanstack/react-query-devtools": "5.24.1",
     "@tanstack/react-virtual": "3.2.0",
+    "@types/dompurify": "3.2.0",
     "await-to-js": "3.0.0",
     "badwords-list": "2.0.1-4",
     "blurhash": "2.0.4",
@@ -83,6 +84,7 @@
     "dateformat": "5.0.3",
     "dayjs": "1.11.10",
     "domhandler": "5.0.3",
+    "dompurify": "3.4.5",
     "emojibase": "15.3.1",
     "emojibase-data": "15.3.2",
     "file-saver": "2.0.5",