chore: bump all dependencies (supersedes #41, #42, #43, #44, #46, #65, #76)

[ronaldtse]

Consolidates all open Dependabot PRs into a single update.

GitHub Actions

• actions/cache v4 → v5
• actions/setup-node v4 → v6
• actions/upload-artifact v4 → v7
• actions/download-artifact v4 → v8
• actions/upload-pages-artifact v3 → v5
• actions/deploy-pages v4 → v5

npm

• vite 7.3.1 → 8.0.16 (with esbuild update)

Stale PRs (patches no longer applicable)

These targeted packages (@babel/runtime, @babel/helpers, @babel/traverse, braces, minimatch) that are no longer in the lockfile:

• Closes Bump @babel/runtime from 7.18.9 to 7.28.4 #41 — @babel/runtime 7.18.9 → 7.28.4 (stale)
• Closes Bump @babel/traverse from 7.18.9 to 7.28.5 #42 — @babel/traverse 7.18.9 → 7.28.5 (stale)
• Closes Bump braces from 3.0.2 to 3.0.3 #43 — braces 3.0.2 → 3.0.3 (stale)
• Closes Bump @babel/helpers from 7.18.9 to 7.28.4 #44 — @babel/helpers 7.18.9 → 7.28.4 (stale)
• Closes Bump minimatch from 3.1.2 to 3.1.5 #46 — minimatch 3.1.2 → 3.1.5 (stale)

Active PRs (changes included here)

• Closes build(deps): bump the actions group across 1 directory with 6 updates #65 — GitHub Actions bumps
• Closes chore(deps): bump esbuild and vite #76 — vite + esbuild bump