chore(deps): upgrade to vite 8 (+ laravel-vite-plugin 3)

[DGINXREAL]

Summary

Upgrades the build toolchain to vite 8, superseding Dependabot #42 (which bumped vite alone and would have broken on the laravel-vite-plugin peer).

• vite ^7.2.4 → ^8.1.5
• laravel-vite-plugin ^2.0.1 → ^3.1.3 — required: 2.x pins vite ^7.0.0; 3.x pins vite ^8.0.0
• Other vite peers already allow vite 8, so no further bumps: @vitejs/plugin-react 5.x, @tailwindcss/vite 4.3.x, vitest 4.x.

vite.config.ts needed no changes.

Also fixes the last security alert

The remaining low-severity esbuild advisory (GHSA-g7r4-m6w7-qqqr) was pinned by vite 7. vite 8 uses esbuild 0.28.x, so npm audit is now 0 vulnerabilities. This clears the 12th/last of the alerts we set out to fix.

Verification

• ddev npm run build — green (valid manifest + chunked assets, incl. WorldMap).
• Dev server boots: VITE v8.1.5 ready with LARAVEL … plugin v3.1.3, no errors.
• ddev npm run test:js (vitest) — 28 passed.
• ddev npm audit — 0 vulnerabilities.

Note: a live in-browser screenshot wasn't captured because routes in this shell are bound to the localhost host (APP_DOMAIN gotcha), which the DDEV https URL doesn't match. vite 8 changes are build-tooling only (React runtime/components unchanged); the production build + dev-server boot are the meaningful gates. Worth a quick eyeball via composer run dev before merge.

Closes #42.

🤖 Generated with Claude Code