fix(security): addresses dependabot security concerns

[robert-7]

Summary

• Addresses Dependabot alert #7, #8, and #9.
• Pins Vite to 7.3.5 to address the Windows dev-server path handling advisories.
• Pins esbuild to 0.28.1 and refreshes the lockfile platform packages to the patched release.

Verification

• pnpm install completed successfully with pnpm 11.9.0.
• Lockfile passed the repository supply-chain policy check.
• Confirmed pnpm overrides now live in pnpm-workspace.yaml, where pnpm 11 reads them.

Dependabot Alerts

• Alert #7: esbuild arbitrary file read on Windows dev server, fixed by esbuild 0.28.1.
• Alert #8: Vite server.fs.deny bypass on Windows alternate paths, fixed by Vite 7.3.5.
• Alert #9: Vite / launch-editor UNC path handling issue, fixed by Vite 7.3.5.