update `html-encoding-sniffer` to v5+

[viceice]

What's the problem this feature will solve?

html-encoding-sniffer v3 uses a now deprecated package whatwg-encoding.
v5+ uses the replacement @exodus/bytes

Describe the solution you'd like

update html-encoding-sniffer to v5 or later

Alternative Solutions

use a package manager override

Additional context

Upgrade whatwg-encoding to v5+ requires a minimal node bump to ^20.19.0 || ^22.12.0 || >=24.0.0