fix(broker,api): pin real ws version, drop @turbostarter/ai from packages/api

- apps/broker: ws 8.19.1 (didn't exist) → 8.20.0 (latest)
- packages/api: drop dangling @turbostarter/ai workspace ref (same
  prune debt as apps/web)
- pnpm-lock.yaml regenerated from 27 workspaces, 2476 resolved packages

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

apps/broker/package.json

@@ -17,7 +17,7 @@
     "@turbostarter/shared": "workspace:*",
     "drizzle-orm": "0.44.7",
     "libsodium-wrappers": "0.7.15",
-    "ws": "8.19.1",
+    "ws": "8.20.0",
     "zod": "catalog:"
   },
   "devDependencies": {