Fix critical and high dashboard dependency advisories

[semyonfox]

Why

pnpm audit --audit-level moderate currently reports 13 advisories in the dashboard dependency tree, including one critical advisory and several high advisories.

Evidence

Local audit output included:

• Critical: vite-plus <=0.1.23, patched in >=0.1.24 (GHSA-g8mr-85jm-7xhm)
• High: react-router >=7.0.0 <=7.14.1, patched in >=7.14.2 / >=7.15.0 depending on advisory (GHSA-49rj-9fvp-4h2h, GHSA-8x6r-g9mw-2r78, GHSA-rxv8-25v2-qmq8)
• High: transitive ws >=8.0.0 <8.21.0 through vite-plus test tooling (GHSA-96hv-2xvq-fx4p)
• Moderate advisories in brace-expansion, launch-editor, and js-yaml

Relevant files:

• dashboard/package.json
• dashboard/pnpm-lock.yaml

Proposed work

• Upgrade vite-plus to at least 0.1.24 and refresh the lockfile.
• Upgrade react-router-dom / react-router to a patched version, preferably >=7.15.0.
• Refresh transitive dev dependencies so ws, brace-expansion, and js-yaml are patched where possible.
• Re-run pnpm audit --audit-level moderate and document any remaining non-runtime/dev-only residual risk.

Acceptance criteria

• pnpm audit --audit-level high returns clean.
• Any remaining moderate findings are explicitly assessed or eliminated.
• pnpm build still succeeds.