build: one workspace for every app and the packages they share

The root pubspec lists Learn's, Todo's and the shared packages, which
the apps now take by path instead of pinned commits of halkyon_shared:
one resolution, one lockfile. Learn's versions stay as they were; Todo
moves to Serverpod 4.0.4 and Dart 3.13 with the rest (its generated code
unchanged), drops google_fonts, which it never used, and a template
line Dart 3.13 refuses.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Tizian 「ティツィアーン」 <raisondetredev@pm.me>

apps/todo/halkyon_todo_flutter/pubspec.yaml

@@ -18,7 +18,7 @@ publish_to: 'none' # Remove this line if you wish to publish to pub.dev
 version: 1.0.0+1
 
 environment:
-  sdk: '^3.12.2'
+  sdk: '^3.13.0'
   flutter: '^3.44.4'
 
 resolution: workspace
@@ -29,11 +29,10 @@ dependencies:
   cupertino_icons: ^1.0.5
   flutter:
     sdk: flutter
-  google_fonts: ^8.1.0
   halkyon_todo_client:
     path: ../halkyon_todo_client
-  serverpod_auth_idp_flutter: 4.0.3
-  serverpod_flutter: 4.0.3
+  serverpod_auth_idp_flutter: 4.0.4
+  serverpod_flutter: 4.0.4
 
 dev_dependencies:
   # Used for agents to drive the app through the Dart MCP
@@ -43,9 +42,6 @@ dev_dependencies:
   flutter_test:
     sdk: flutter
 
-dependency_overrides:
-  flutter_secure_storage: ^10.0.0
-
 # For information on the generic Dart part of this file, see the
 # following page: https://dart.dev/tools/pub/pubspec