every Hanzo dependency is the version npm serves

Ranges drift once nothing moves them: a caret that has not been rewritten
since it was written pins whatever was current that day, and an exact pin
cannot even take a patch. Both are updated here.

One line per package, so a surface reads the same components, the same
tokens and the same face as every other one.

frontend/package.json

@@ -2,7 +2,7 @@
   "name": "@hanzo/kms-frontend",
   "private": true,
   "version": "3.0.0",
-  "description": "Hanzo KMS admin SPA — composed from an in-app AdminShell + CollectionCRUD over @hanzo/brand. Talks to /v1/kms/* on the kmsd binary.",
+  "description": "Hanzo KMS admin SPA \u2014 composed from an in-app AdminShell + CollectionCRUD over @hanzo/brand. Talks to /v1/kms/* on the kmsd binary.",
   "type": "module",
   "packageManager": "[email protected]",
   "scripts": {
@@ -12,7 +12,7 @@
     "typecheck": "tsc --noEmit"
   },
   "dependencies": {
-    "@hanzo/brand": "^1.3.0",
+    "@hanzo/brand": "^1.4.8",
     "@tanstack/react-query": "^5.62.7",
     "clsx": "^2.1.1",
     "react": "^19.0.0",