fix(deps): bump wrangler to pull patched sharp

sharp was pinned transitively via wrangler -> miniflare below the
0.35.0 security fix. Bumping wrangler resolves the advisory without
any source change.

package.json

@@ -1,6 +1,6 @@
 {
   "packageManager": "pnpm@11.1.1",
   "devDependencies": {
-    "wrangler": "^4.106.0"
+    "wrangler": "^4.114.0"
   }
 }