chore(deps): resolve npm audit advisories
Declared ranges — the lockfile is not published, so these are what consumers
resolve against:
core ws ^8.18.0 -> ^8.21.3 (prod, vuln 8.0.0-8.20.1)
core, dapp, wallet, react vitest ^3.2.3 -> ^3.2.7 (dev, vuln <3.2.6)
Transitive, lockfile only: vite 7.3.2 -> 7.3.6, postcss 8.5.12 -> 8.5.26,
nanoid 3.3.11 -> 3.3.18, brace-expansion 5.0.5 -> 5.0.9.
npm audit --audit-level=moderate now exits 0. esbuild's low-severity Windows
dev-server advisory is left: needs a major bump behind a peer range.
c2b60b5b3a