fix: mirror qrcode runtime dependency

extensions/whatsapp/package.json

@@ -7,7 +7,6 @@
     "@whiskeysockets/baileys": "7.0.0-rc.9",
     "https-proxy-agent": "^9.0.0",
     "jimp": "^1.6.1",
-    "qrcode": "1.5.4",
     "typebox": "1.1.34",
     "undici": "8.1.0"
   },

package.json

@@ -1766,6 +1766,7 @@
         "jszip",
         "markdown-it",
         "openai",
+        "qrcode",
         "semver",
         "sqlite-vec",
         "tar",

pnpm-lock.yaml

@@ -1458,9 +1458,6 @@ importers:
       jimp:
         specifier: ^1.6.1
         version: 1.6.1
-      qrcode:
-        specifier: 1.5.4
-        version: 1.5.4
       typebox:
         specifier: 1.1.34
         version: 1.1.34

src/plugins/bundled-runtime-deps-drift.test.ts

@@ -13,7 +13,6 @@ describe("mirrored root runtime dependency drift guard", () => {
     "file-type", // available transitively via mirrored deps
     "ipaddr.js", // available transitively via mirrored deps
     "proxy-agent", // available transitively via mirrored deps
-    "qrcode", // QR setup flows stage this through the owning channel plugin, not the root mirror
     "typescript", // CLI/dev only (api-baseline, jiti-runtime-api)
   ]);