fix(build): 修复前端依赖安全门禁

同步缺失的 Vitest 锁文件，并将 Vitest、Vite 及受影响的传递依赖限制到已修复版本，避免严格 frozen install 和高危依赖审计阻塞 CI。\n\n验证：pnpm frozen install、lint、26 个前端测试、Go 测试、生产构建及 high 级依赖审计通过。

apps/web/package.json

@@ -44,6 +44,6 @@
     "@types/react-dom": "^19.0.0",
     "tailwindcss": "^4.3.0",
     "typescript": "^5.8.0",
-    "vitest": "3.2.4"
+    "vitest": "3.2.6"
   }
 }

package.json

@@ -21,6 +21,7 @@
     "dotenv-cli": "^11.0.0",
     "nx": "^21.0.0",
     "typescript": "^5.8.0",
-    "vite": "^7.0.0"
+    "vite": "^7.3.5",
+    "vitest": "3.2.6"
   }
 }

pnpm-workspace.yaml

@@ -1,6 +1,20 @@
 packages:
   - apps/web
   - packages/*
+
 allowBuilds:
   esbuild: true
   nx: true
+
+overrides:
+  '@babel/core@<=7.29.0': 7.29.6
+  'dompurify@<=3.4.10': 3.4.11
+  'esbuild@>=0.27.3 <0.28.1': 0.28.1
+  'form-data@>=4.0.0 <4.0.6': 4.0.6
+  'js-yaml@<3.15.0': 4.1.1
+  'mermaid@>=11.0.0-alpha.1 <=11.14.0': 11.15.0
+  'minimatch@>=9.0.0 <9.0.7': 9.0.7
+  '@nx/js>picomatch': 4.0.5
+  '@nx/vite>picomatch': 4.0.5
+  '@nx/workspace>picomatch': 4.0.5
+  'tmp@<0.2.7': 0.2.7