fix: bump react-router-dom to 6.30.6 in call-recorder and fireflies (Dependabot) (#24727)

## Summary

Bumps **react-router-dom 6.30.4 -> 6.30.6** (with `react-router` and
`@remix-run/router` in lockstep) in the two app lockfiles that still
carried the vulnerable range - `public/call-recorder` and
`public/fireflies` - clearing **GHSA-jjmj-jmhj-qwj2** (medium, open
redirect leading to XSS) on both: alerts
[1816](https://github.com/twentyhq/twenty/security/dependabot/1816) and
[1863](https://github.com/twentyhq/twenty/security/dependabot/1863).

Both apps reach it through a caret (`^6.4.4`), so a recursive `yarn up
-R react-router-dom` does it with **no resolution and no `package.json`
change**.

### On the advisory's "no patched version"

Dependabot lists no 6.x fix for this advisory, but its vulnerable range
is `>= 6.30.2, <= 6.30.4` - **6.30.6 sits outside it**. #24698's
identical bump on the root lockfile already closed the root instance of
this alert, which confirms the read.

### Not closed here

`GHSA-337j-9hxr-rhxg` (SSR `deserializeErrors` constructor injection)
and `GHSA-wrjc-x8rr-h8h6` (backslash open redirect in
`Link`/`useNavigate`) are fixed only in react-router **7.18.0**; they
stay open on these manifests and on root. A 6.x lift cannot reach them -
that is a v7 migration or a reachability call.

## Verification

- react-router-dom, react-router and @remix-run/router resolve to 6.30.6
/ 6.30.6 / 1.23.4 in both lockfiles.
- `yarn install --immutable` passes in both apps.
- 6.30.6 published 2026-08-18, past the 3-day age gate.