chore(ui): upgrade Sandbox UI dependencies

[drewstone]

Summary

• Pin @tangle-network/sandbox-ui to 0.90.3, @tangle-network/agent-interface to 0.36.0, @tangle-network/brand to 1.1.0, and @tangle-network/ui to 11.2.1.
• Replace four stale local Sandbox UI declarations with the published package types. No compatibility aliases or suppressions remain.
• Adapt the native Input and Badge APIs and fix the mobile Instances action row found during browser testing.

Package audit

• 60 source files, 60 import statements, 285 named import occurrences, 42 unique Sandbox UI symbols.
• All 42 symbols exist in the published 0.90.3 declarations; 0 are missing.
• Exact pins are present in both package.json and yarn.lock.

Checks

• yarn install --immutable: pass
• yarn typecheck: pass, 5 projects plus 2 dependent tasks
• yarn format:check: pass
• yarn lint: pass, 13 projects plus 2 dependent tasks, 0 errors and 14 existing warnings
• yarn test: pass, 12 projects plus 2 dependent tasks, 37 test files and 288 tests
• yarn build: pass, 11 projects plus 5 dependent tasks
• yarn check:codegen: pass
• yarn pr:check: pass
• Browser: 7 affected routes returned HTTP 200 with expected content, 0 page errors, 0 same-origin HTTP errors, and 0 horizontal overflow
• Interaction: Instances Browse blueprints navigated to /blueprints and rendered the Blueprints heading
• Mobile at 390x844: both action buttons remain inside the viewport; 0 horizontal overflow
• Desktop before/after image comparison: 0 differing pixels
• Merge proof against current origin/develop: 4335baa67593b0ba7ad579d7dcc37bccf5ab0e6e

Screenshots

Post-change desktop

Mobile before

Mobile after

Residual risk

• Yarn reports two upstream peer-metadata warnings inside the Sandbox UI Tiptap dependency chain. All four required Tangle peers are satisfied, and this app imports only the primitives export.
• Wallet-signed transaction suites were not run because this migration does not change wallet or transaction logic; the affected rendered routes and navigation were tested in a real production build.

[tangletools]

✅ Auto-approved drewstone PR — bb280133

This PR was opened by the trusted drewstone account.
The full PR reviewer audit still runs separately and will publish findings if it detects issues.

_{tangletools · auto-approval · reason: drewstone_author · 2026-07-28T11:00:12Z}