chore(deps): update Node package versions across the workspace

[marioserrano09]

Summary

• Bump vite, vitest, vite-plugin-dts, @vitest/coverage-v8, eslint, prettier, @types/node, and the pinned pnpm version to their latest releases across all pnpm-workspace packages (platform/packages/*, extensions/*/packages/*) and the example apps.
• Closes 3 known advisories that pnpm audit reported before this change:
  • High — vite server.fs.deny bypass on Windows alternate paths (GHSA-fx2h-pf6j-xcff)
  • Moderate — vite/launch-editor NTLMv2 hash disclosure via UNC path handling (GHSA-v6wh-96g9-6wx3)
  • Moderate — js-yaml quadratic-complexity DoS via repeated aliases, pulled in transitively by eslint (GHSA-h67p-54hq-rp68)
  • pnpm audit now reports 0 vulnerabilities.
• typescript is pinned to ^6.0.3 rather than the newly released 7.x: TS7 restructured its package exports map, which breaks vue-tsc's internal require('typescript/lib/tsc') call.
• vue-tsc stays on the latest 2.x line (^2.2.12) rather than 3.x: vue-tsc 3's @vue/language-core pulls vite-plugin-dts into an experimental Vue-SFC declaration mode that emits broken .d.ts output for this project's component re-exports (confirmed via a clean bisect against the original lockfile). vue itself (the runtime dependency) is updated to its latest release, 3.5.39.
• Fixes tsconfig gaps surfaced by the @types/node major bump: TypeScript no longer auto-includes all @types/* packages without an explicit "types": ["node"], so this is added to the cli, files-sdk, and vue tsconfigs (both tsconfig.json and tsconfig.build.json where applicable).
• Fixes two vitest 4.1 mock-typing regressions in test helpers (sdk, saas-sdk, reports-sdk, files-sdk) and one noUncheckedIndexedAccess strictness fix in a ui-core test.

Verified

• pnpm install — clean resolve, no workspace:* regressions.
• pnpm -r run typecheck — all 7 typed packages pass.
• pnpm -r run build — all 7 packages build successfully.
• pnpm -r run test — 84/84 tests passing across all packages.
• pnpm audit — 0 vulnerabilities (was 1 high + 2 moderate).

Known pre-existing issues (not touched by this PR, out of scope)

• pnpm -r run lint was already broken before this change: no eslint.config.js exists anywhere in the repo, so ESLint 9+ (already the version pinned before this PR) fails immediately with "couldn't find an eslint.config.js file." Left untouched since fixing it requires designing a lint ruleset, a separate task from a dependency bump.
• platform/packages/vue's build script prints benign TS2307: Cannot find module './components/*.vue' diagnostics during .d.ts generation. Confirmed via bisect against the original lockfile that this is pre-existing (present before this PR too) and does not fail the build or affect the emitted output.

Test plan

• pnpm install
• pnpm -r run typecheck
• pnpm -r run build
• pnpm -r run test
• pnpm audit

---

Generated by Claude Code