Bump eslint to 10.x once eslint-plugin-react ships ESLint-10 support

[beenuar]

Context

When Dependabot batched the v9 → v10 ESLint upgrade in #342, CI failed with:

```
TypeError: Error while loading rule 'react/display-name':
contextOrFilename.getFilename is not a function
at eslint-plugin-react/lib/util/version.js:31
```

eslint-plugin-react@7.37.5 (the latest on npm at the time #342 opened) is not compatible with ESLint 10's new rule-context API.

What we did

#348 splits the dev-tooling Dependabot group: eslint* and @typescript-eslint/* now land in a quarantined dev-tooling-eslint group so they cannot block typescript / tailwindcss / postcss bumps from merging.

What's left

Once eslint-plugin-react publishes a release that supports ESLint 10 (track upstream: https://github.com/jsx-eslint/eslint-plugin-react/issues), we should:

1. Bump eslint to ^10.x in apps/web/package.json.
2. Bump eslint-config-next accordingly.
3. Drop the dev-tooling-eslint group from .github/dependabot.yml and fold eslint* / @typescript-eslint/* back into dev-tooling.
4. Re-run pnpm --filter @aisoc/web lint to confirm a clean run.

Acceptance

• pnpm --filter @aisoc/web lint is green on eslint@10.x.
• .github/dependabot.yml has a single dev-tooling group again.

Closes #342 (which can't merge as-is).