fix(core): raise image-size and sharp floors past known advisories

[BleedingDev]

image-size ICNS advisory | image-size JXL/HEIF advisory | sharp libvips advisory | sharp libheif advisory

Why the change

The published image-size and sharp ranges allow versions with known advisories, so raising their floors excludes those releases.

Special things to note

• image-size requires Node 18 or newer; sharp remains an optional peer, so its floor affects projects that install it.
• Local validation passes all 11 unit suites with 105 tests and 13 existing skips, core/react CJS/ESM and declaration builds, and all 88 Biome checks.
• Current-head upstream test workflows require approval and have not run.

Change outline

 dependencies
-  image-size: ^2.0.1
+  image-size: ^2.0.4

 optional peerDependencies
-  sharp: >=0.33.5
+  sharp: >=0.35.4