fix(web): drop dangling @turbostarter/ai and @turbostarter/cms deps after prune

Step 3 pruned packages/ai + packages/cms but left workspace refs in
apps/web/package.json, which blocked pnpm install. Removes the two
dangling entries.

apps/web source imports remain broken until a later cleanup pass —
scope limited to unblocking the broker smoke test. Cleanup debt
inventory: 48 files import @turbostarter/ai, 5 files import
@turbostarter/cms (53 total, mostly .tsx under src/).

Also pins apps/broker's drizzle-orm to 0.44.7 (same as packages/db)
since there's no catalog entry for drizzle-orm.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/broker/package.json

@@ -15,7 +15,7 @@
   "dependencies": {
     "@turbostarter/db": "workspace:*",
     "@turbostarter/shared": "workspace:*",
-    "drizzle-orm": "catalog:",
+    "drizzle-orm": "0.44.7",
     "libsodium-wrappers": "0.7.15",
     "ws": "8.19.1",
     "zod": "catalog:"