fix(deps): update uuid [security] + pin esbuild/rollup/vite

[renovate]

Changes

• Security: Update uuid 11.1.0 → 11.1.1 (CVE-2026-41907 / GHSA-w5hq-g745-h8pq) — missing buffer bounds check in v3/v5/v6 when buf is provided
• Chore: Pin esbuild, rollup, and vite to exact versions via pnpm.overrides to prevent transitive dep churn in unrelated Renovate PRs

Why the pins

Every Renovate security PR was bundling noisy esbuild/rollup/vite@7 churn in the lock file because:

• vite@8 requires esbuild ^0.28.0 but the root had ^0.25.0, causing dual resolution
• rollup had no override, so it floated freely as a vite transitive dep
• vitest@4 (pulled in by @copilotkit/aimock) requires vite ^6||^7, which was spinning up a separate vite@7 instance instead of reusing vite@8

Pinning all three in pnpm.overrides collapses the tree to single versions and stops the churn.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.