chore: update all packages to latest versions

- aionui 2.1.4 -> 2.1.50
- desloppify 0.9.15 -> 1.0
- ds4 -> 2026-08-05 (b030961)
- freebuff 0.0.85 -> 0.0.142 (binary moved to GitHub releases)
- graphify 0.7.10 -> 0.9.35 (license Apache-2.0, fix sed patterns for versioned deps)
- hipengine 0.2.2 -> 0.3.0 (console script renamed to hipengine)
- kubernetes-mcp-server 0.0.62 -> 0.0.66 (requires go >= 1.26.3)
- mcp-gateway 2.11.0 -> 3.4.0 (requires rustc >= 1.95)
- omniroute 3.8.28 -> 3.8.49
- radar 1.6.1 -> 1.9.1 (drop obsolete lockfile sed patch)
- relay-free-llm -> 96e6c48, cerebras-cloud-sdk 1.67.0 -> 1.91.0
- stakpak 0.3.86 -> 0.3.88

Add nixpkgs-latest input for toolchains newer than the pinned nixpkgs.

packages/radar/package.nix

@@ -6,13 +6,13 @@
 }:
 
 let
-  version = "1.6.1";
+  version = "1.9.1";
 
   src = fetchFromGitHub {
     owner = "skyhook-io";
     repo = "radar";
     rev = "v${version}";
-    hash = "sha256-vctvMD7sca7HgEM1ufnUClhc04ucnvl3Zx4jTfaAzyE=";
+    hash = "sha256-VZLzmxW86yMtYILhmKswkj57KD4Z+8ILwHKiO53YMWE=";
   };
 
   # Build the frontend as a separate derivation.
@@ -23,34 +23,10 @@ let
     inherit version src;
     sourceRoot = "source";
 
-    postPatch = ''
-      # Fix missing resolved URLs for packages under web/node_modules/
-      # WARNING: This sed is version-specific — if upstream bumps a
-      # transitive dep version, the patterns silently fail and the
-      # build breaks. Update resolved/integrity values when bumping radar.
-      # that are actually external npm packages (not workspace links).
-      # Insert "resolved" and "integrity" after the "version" field
-      # for each affected package using sed.
-      sed -i \
-        -e '/"web\/node_modules\/@vitejs\/plugin-react"/,/^[[:space:]]*}/{
-            /"version"/a\
-        "resolved": "https://registry.npmjs.org/@vitejs/plugin-react/-/plugin-react-6.0.1.tgz",\
-        "integrity": "sha512-l9X/E3cDb+xY3SWzlG1MOGt2usfEHGMNIaegaUGFsLkb3RCn/k8/TOXBcab+OndDI4TBtktT8/9BwwW8Vi9KUQ==",
-          }' \
-        -e '/"web\/node_modules\/@rolldown\/pluginutils"/,/^[[:space:]]*}/{
-            /"version"/a\
-        "resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.0-rc.7.tgz",\
-        "integrity": "sha512-qujRfC8sFVInYSPPMLQByRh7zhwkGFS4+tyMQ83srV1qrxL4g8E2tyxVVyxd0+8QeBM1mIk9KbWxkegRr76XzA==",
-          }' \
-        -e '/"web\/node_modules\/@types\/diff"/,/^[[:space:]]*}/{
-            /"version"/a\
-        "resolved": "https://registry.npmjs.org/@types/diff/-/diff-8.0.0.tgz",\
-        "integrity": "sha512-o7jqJM04gfaYrdCecCVMbZhNdG6T1MHg/oQoRFdERLV+4d+V7FijhiEAbFu0Usww84Yijk9yH58U4Jk4HbtzZw==",
-          }' \
-        package-lock.json
-    '';
+    # Upstream lockfile ships complete resolved/integrity fields for all
+    # packages since v1.9.x, so no lockfile patching is needed anymore.
 
-    npmDepsHash = "sha256-6t0Q3Xzrk1w8zC00H721o/OzHxNhAfCH7EdRXrKQsAg=";
+    npmDepsHash = "sha256-9xS5ChQ1xBix/n9N8vyBsHlHYmYXsibTK5J+X6mRgM4=";
     npmDepsFetcherVersion = 2;
     makeCacheWritable = true;
 
@@ -78,7 +54,7 @@ buildGoModule {
   pname = "radar";
   inherit version src;
 
-  vendorHash = "sha256-vhp0dNPKTOg2NUVD5QoLuTnCumdwzDypvh/rUEhGbL4=";
+  vendorHash = "sha256-d26tlh+Twv9GFX6NmR25Q9OpP/pUL2T4grdncQHYSg4=";
 
   # Copy pre-built frontend assets before Go compilation for go:embed
   preBuild = ''