Remove "open source" hero badge from landing page; fix dep vulnerabilities

[Copilot]

Removes the pill badge ("open source · works on macOS, Linux, Windows") from the landing page hero section and cleans up its now-orphaned CSS rule. Also bumps dev dependencies via npm audit fix to clear 4 vulnerabilities surfaced during the change.

docs/index.html

• Removed <span class="hero-badge"> element from hero section
• Removed the .hero-badge CSS rule block (was display/border/padding/color styles for the pill)

package-lock.json

• vitest → critical: arbitrary file read/exec via UI server
• vite → high: path traversal + server.fs.deny bypass
• postcss → moderate: XSS via CSS stringify
• esbuild → low: arbitrary file read on Windows dev server

[KalebCole]

does this affect the new pages.yaml file that was created in a different pull request? @copilot

[Copilot]

does this affect the new pages.yaml file that was created in a different pull request? @copilot

No—this PR does not touch any pages.yaml file. The change set here is limited to docs/index.html (removing the hero badge/CSS) plus dependency lockfile updates, so it won’t affect a pages.yaml introduced in another PR.

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.