Use @webship-js/drupal-core-steps 2.1 for the webship-js suite and refresh the dependencies

Problem/Motivation

The site template's functional tests (5 feature files) run on webship-js, with the step definitions and the settings kept in the project itself (cucumber.js, tests/step-definitions/).

The public step pack @webship-js/drupal-core-steps 2.1 (npm, GitHub) now ships, for any Drupal core site:

• login by handle (verified, with a Honeypot-aware loginWait) and Given I add the testing users from the users registry
• named administration pages, status messages, listings and operations
• the media library, CKEditor and access control (I should be denied access to "...")
• site structure assertions, Layout Builder steps, a selector preset and the complete default settings

Local copies drift from the pack and duplicate its maintenance. In this project:

• Two custom steps in tests/step-definitions/webapi_starter.steps.js are ambiguous with the pack: the login by handle (I am a logged in user with the "..." user) and I add the testing users. Both match the same sentences as the pack's, so every such sentence matches two definitions once the pack is loaded. They are the only two definitions in the file.
• CI pins DRUPAL_CORE: "11.4.8", a patch release, in the global variables and in the composer job; the comment on the composer job explains it (11.4.8 carries a Twig fix that 11.4.6 lacks).

Related: #3635916 (Node.js 24 and Yarn 4.18.1).

Steps to reproduce

1. Read cucumber.js and tests/step-definitions/webapi_starter.steps.js on the 2.0.x branch.
2. The custom login step and the testing-users step match the same sentences as the pack's.
3. Read DRUPAL_CORE in .gitlab-ci.yml.

Proposed resolution

The pack's 2.1.0 is on npm.

1. Add @webship-js/drupal-core-steps (^2.1.0) to the package.json devDependencies and its step glob (node_modules/@webship-js/drupal-core-steps/tests/step-definitions/**/*.js) to cucumber.js, between webship-js's own glob and the project's own. webship-js stays at ^2.0.6.
2. The users registry in cucumber.js already has the pack's shape (username, email, password, roles, isAdmin); keep it.
3. Remove the two custom steps the pack now provides (the login by handle and I add the testing users) from tests/step-definitions/webapi_starter.steps.js; they are its only definitions.
4. Add a test:dry script (cucumber-js --dry-run) and a dry run in CI before the browser job, so an undefined or ambiguous step fails early.
5. Pin DRUPAL_CORE: "11.4.x-dev" instead of "11.4.8" in both places, and update the comment (the branch carries the same Twig fix). Check the Composer and npm constraints against the current releases and name the ones that change in the merge request.
6. One merge request on the 2.0.x branch from an issue fork, pipeline green, then a release.

AI-Generated: Yes (issue text)

Remaining tasks

• ✅ File an issue about this project
• ✅ Addition/Change/Update/Fix to this project
• ✅ Testing to ensure no regression
• ✅ Automated unit/functional testing coverage
• ❌ Developer Documentation support on feature change/addition
• ➖ User Guide Documentation support on feature change/addition
• ➖ UX/UI designer responsibilities
• ➖ Accessibility and Readability
• ❌ Reviewed by a human
• ❌ Code review by maintainers
• ❌ Full testing and approval
• ❌ Credit contributors
• ❌ Review with the product owner
• ✅ Update Release Notes
• ✅ Release

User interface changes

• N/A

API changes

• N/A

Data model changes

• N/A

Release notes snippet

• The automated tests run on the @webship-js/drupal-core-steps step pack; CI runs a dry run first.