Upgrade dependencies and migrate Solid auth to @uvdsl/solid-oidc-client-browser

[m5x5]

Summary

This PR upgrades the project's build tooling and dependencies to their latest versions and replaces Inrupt's Solid authentication with the actively-maintained @uvdsl/solid-oidc-client-browser.

Auth migration (Inrupt → uvdsl)

Previously, auth was provided by @inrupt/solid-client-authn-browser, shipped as a prebuilt global bundle (lib/solid-client-authn.bundle.js) and consumed via a solidClientAuthentication global. This is replaced with the npm-managed @uvdsl/solid-oidc-client-browser, bundled through webpack like every other dependency.

API mapping in js/index.js:

Before (Inrupt)	After (uvdsl)
solidClientAuthentication.fetch	session.authFetch
handleIncomingRedirect({ restorePreviousSession: true })	session.handleRedirectFromLogin() / session.restore()
getDefaultSession().info.isLoggedIn	session.isActive
getDefaultSession().info.webId	session.webId
login({ oidcIssuer, redirectUrl, clientName })	session.login(oidcIssuer, redirectUrl)

session.restore() rejects when there is no session to restore (e.g. a first visit), so it is wrapped in a try/catch that falls through to the login form.

• Removed lib/solid-client-authn.bundle.js and its <script> tag in index.html.

Dependency upgrades

• webpack 5.68 → 5.107, webpack-cli 4 → 7, webpack-dev-server 4 → 5
• Babel core/preset-env/plugin-transform-runtime/runtime → 7.29
• node-polyfill-webpack-plugin 1 → 4
• jsonld 5 → 9, rdf-parse 1 → 5, readable-web-to-node-stream 3 → 5
• dayjs and calendar-link bumped to latest

Build config

• webpack.config.js: set assetModuleFilename so the emitted Solid-OIDC refresh worker gets a stable filename (RefreshWorker.js) and can be gitignored like the other build artifacts.
• Updated .gitignore, README.md, and CHANGELOG.md.

Testing

• npx webpack builds successfully (only the pre-existing bundle-size warnings).
• Served the production build and loaded it in a headless Chrome: the app initializes, restore() resolves gracefully with no session, and the WebID login form is shown with no uncaught errors in the console.

Note: full login against a live Solid IdP was not exercised end-to-end in CI; the unauthenticated load path and the documented uvdsl API surface were verified.

🤖 Generated with Claude Code