deps: patch 6 dependabot advisories (vite, undici, esbuild)

Bump dev/build tooling to patched versions and add pnpm overrides
for transitive deps. All advisories are Windows-specific or
dev-server issues; none touch the runtime proxy path.

- vite    8.0.13 -> ^8.0.16   (GHSA-fx2h-pf6j-xcff high, GHSA-v6wh-9g99-6wx3 moderate)
- esbuild 0.28.0 -> ^0.28.1   (GHSA-g7r4-m6w7-qqqr low)
- undici  override ^7.28.0    (GHSA-vmh5-mc38-953g high, GHSA-pr7r-676h-xcf6 moderate; via wrangler>miniflare)
- esbuild override ^0.28.1    (via wrangler>esbuild)

pnpm audit: No known vulnerabilities found.
typecheck clean, build ok, 342/342 tests pass.

package.json

@@ -76,16 +76,19 @@
   "devDependencies": {
     "@cloudflare/workers-types": "^4.20240512.0",
     "@types/node": "^20.12.0",
-    "esbuild": "^0.28.0",
+    "esbuild": "^0.28.1",
     "tsx": "^4.10.0",
     "typescript": "^5.4.0",
-    "vite": "8.0.13",
+    "vite": "^8.0.16",
     "vitest": "^4.1.6",
     "wrangler": "^4.92.0"
   },
   "pnpm": {
     "overrides": {
-      "ws@>=8.0.0 <8.20.1": "^8.20.1"
+      "ws@>=8.0.0 <8.20.1": "^8.20.1",
+      "vite@>=8.0.0 <8.0.16": "^8.0.16",
+      "undici@>=7.0.0 <7.28.0": "^7.28.0",
+      "esbuild@>=0.27.3 <0.28.1": "^0.28.1"
     }
   },
   "dependencies": {