Upgrade frontend toolchain to resolve npm audit findings

[blacks1ne]

Summary

Update the frontend development toolchain to resolve the current npm audit findings.

Reproduction

cd web
npm ci
npm audit

Current result: four fixable findings (one low, three high), involving the Vite/PostCSS/Picomatch/Babel development toolchain. The production bundle builds, but several advisories concern the Vite development server and file/source-map handling.

Proposed resolution

• Upgrade Vite and affected transitive dependencies to fixed releases.
• Regenerate and commit package-lock.json.
• Confirm React/Tauri production and development builds still work.
• Avoid exposing the Vite dev server beyond a trusted development host until updated.

Acceptance criteria

• npm audit has no high-severity findings (ideally zero findings).
• npm run build passes.
• Tauri development startup is smoke-tested after the upgrade.