fix: keep cron@1.8.x and moment in package.json for server-simple

cron upgrade and moment removal belong to the complex PR since business
hours and analytics still depend on them.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: ggazzo

apps/meteor/package.json

@@ -73,7 +73,6 @@
 		"@bugsnag/js": "~7.20.2",
 		"@bugsnag/plugin-react": "~7.19.0",
 		"@datastructures-js/priority-queue": "^6.3.5",
-		"@date-fns/tz": "^1.4.1",
 		"@google-cloud/storage": "^7.15.0",
 		"@kaciras/deasync": "^1.1.0",
 		"@nivo/bar": "0.88.0",
@@ -184,10 +183,11 @@
 		"cookie": "^0.7.2",
 		"cookie-parser": "^1.4.7",
 		"cors": "^2.8.6",
-		"cron": "4.4.0",
+		"cron": "~1.8.2",
 		"cron-validator": "^1.3.1",
 		"css-vars-ponyfill": "^2.4.9",
 		"csv-parse": "^5.5.6",
+		"@date-fns/tz": "^1.4.1",
 		"date-fns": "~4.1.0",
 		"date.js": "~0.3.3",
 		"debug": "~4.3.7",
@@ -246,6 +246,8 @@
 		"mime-type": "^4.0.0",
 		"mkdirp": "^1.0.4",
 		"moleculer": "^0.14.35",
+		"moment": "^2.30.1",
+		"moment-timezone": "^0.5.48",
 		"mongo-message-queue": "^1.1.0",
 		"mongodb": "6.16.0",
 		"nats": "^2.28.2",