chore: update indiekit-endpoint-activitypub to fix webfinger baseUrl wiring

Fedify webfinger hostname check was failing because createFedifyMiddleware
did not forward publicationUrl to fromExpressRequest, causing localhost:3000
to be compared against blog.giersig.eu — all public federation endpoints
returned 302 redirect instead of AP JSON.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

package-lock.json

@@ -2419,7 +2419,7 @@
     },
     "node_modules/@rmdes/indiekit-endpoint-activitypub": {
       "version": "3.13.4",
-      "resolved": "git+https://gitea.giersig.eu/svemagie/indiekit-endpoint-activitypub#ba4bb53f0d67d0b043d05aa12647672492bb8e7b",
+      "resolved": "git+https://gitea.giersig.eu/svemagie/indiekit-endpoint-activitypub#f03f9050d97f7879e8a22c905f05a11a41ce8b96",
       "license": "MIT",
       "dependencies": {
         "@fedify/debugger": "^2.1.0",