task: #3629798 Remove the temporary CI-only Twig pin and svg-sanitize alias

Issue: https://www.drupal.org/project/varbase_starter/issues/3629798

• Drupal core fixed the Twig 3.30 TypeError in #3625969 (core 11.4.8, 11.3.18, 10.6.18).
• drupal/svg_image 3.2.5 requires enshrined/svg-sanitize ^1.0, so the alias is not needed and now holds svg_image back at 3.2.4.
• Verified 2026-10-10 on a fresh Drupal CMS build of Varbase Starter (core 11.4.8, Twig 3.30.0, svg-sanitize 1.0.0, no workarounds): installs and renders with no errors.
• vardot/drupal-core-patches 11.4.0.8 (released 2026-10-10) dropped patch #3465033, which no longer applied to core 11.4.9, so pipelines on core 11.4.9 patch again.

AI-Generated: Yes

Checkpoints:

• File an issue
• Addition/Change/Update/Fix
• Testing to ensure no regression
• Automated unit testing coverage
• Automated functional testing coverage
• UX/UI designer responsibilities
• Readability
• Accessibility
• Performance
• Security
• Developer Documentation
• User Guide Documentation
• Reviewed by human
• Code review by maintainers
• Full testing and approval
• Credit contributors
• Review with the product owner
• Release notes snippet
• Release