fix(security): upgrade vite to 8.2.0 (CVE-2026-39363)

[Vishal-770]

Summary

Upgrades vite from 7.3.1 → 8.2.0 to fix a high severity security vulnerability.

Closes #26

Vulnerability

• CVE: CVE-2026-39363
• GHSA: GHSA-p9ff-h696-f583
• Severity: High

The server.fs check was not enforced on the fetchModule method exposed via Vite's dev server WebSocket, allowing arbitrary file reads if the dev server is exposed to the network.

Changes

• vite: 7.3.1 → 8.2.0
• Updated pnpm-lock.yaml

Testing

• ✅ TypeScript — 0 errors (pnpm tsc --noEmit)
• ✅ Build verified locally

[Copilot]

Pull request overview

Upgrades Vite to a non-vulnerable version to address CVE-2026-39363 (arbitrary file read via dev server WebSocket when exposed to the network), aligning the dev toolchain with the security advisory.

Changes:

• Bump vite from 7.3.1 to 8.2.0 in package.json.
• Regenerate pnpm-lock.yaml to reflect updated Vite and transitive dependency graph.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated 1 comment.

File	Description
package.json	Updates the Vite devDependency to ^8.2.0.
pnpm-lock.yaml	Updates the resolved Vite version and related transitive deps to match the upgrade.

Files not reviewed (1)

• pnpm-lock.yaml: Generated file