[Sprint 21] Sync dependency packages and configure local developer environment

[mpaulosky]

Summary

Sync the following package versions and developer configuration updates to prepare dev branch for the next sprint:

Changes

• MongoDB drivers: Update from 3.8.1 to 3.9.0 (MongoDB.Bson, MongoDB.Driver)
• Auth0.ManagementApi: Update from 8.3.0 to 8.4.0
• Microsoft.NET.Test.Sdk: Update from 18.5.1 to 18.6.0
• VSCode settings: Add dotnet.server environment configuration and autobuild spell check
• npm structure: Move package.json/package-lock.json from root to src/Web only

Acceptance Criteria

• All package versions updated in Directory.Packages.props
• VSCode settings configured for local dev environment
• npm structure reorganized appropriately
• All tests pass locally (pre-push gate: gates 2-4)
• Build has zero warnings and errors

Related

Follows squad issue-first branch sourcing process.

[github-actions]

🏗️ Squad Triage — Aragorn (Lead / Architect)

Issue: #404 — [Sprint 21] Sync dependency packages and configure local developer environment
Assigned to: Sam (Backend / .NET)
Reason: Issue relates to backend/API work

Team roster:

• Aragorn (Lead / Architect) → label: squad:aragorn
• Sam (Backend / .NET) → label: squad:sam
• Legolas (Frontend / Blazor) → label: squad:legolas
• Gimli (Tester) → label: squad:gimli
• Boromir (DevOps / Infra) → label: squad:boromir
• Gandalf (Security / Auth) → label: squad:gandalf
• Frodo (Tech Writer) → label: squad:frodo
• Pippin (Docs) → label: squad:pippin
• Bilbo (Tech Blogger) → label: squad:bilbo
• Ralph (Meta) → label: squad:ralph

To reassign, remove the current squad:* label and add the correct one.

[mpaulosky]

🤖 Duplicate detected: This work is already tracked in #405 and is being completed via PR #406 (squad/405-sync-dependency-packages → dev).

Closing this as duplicate to consolidate board state. Please reference #405 for updates.