fix(security): add pnpm overrides for esbuild and fast-uri

[fro-bot]

Summary

Rebased version of #1463 (now CONFLICTING due to Renovate lock-file churn). Same intent: add pnpm overrides in pnpm-workspace.yaml for transitive esbuild and fast-uri. Freshly regenerated pnpm-lock.yaml.

Alerts Fixed

Alert	Severity	Package	Vulnerable Range	Patched
#86	HIGH	fast-uri	<= 3.1.0	3.1.2
#87	HIGH	fast-uri	<= 3.1.1	3.1.2
#89	LOW	esbuild	>= 0.27.3, < 0.28.1	0.28.1
#90	HIGH	esbuild	>= 0.17.0, < 0.28.1	0.28.1

Details

Both esbuild and fast-uri are transitive dependencies:

• esbuild: via vite, vitest, @eslint/config-inspector, bundle-require, tsup
• fast-uri: via ajv (used by eslint)

The overrides follow the same pattern as bfra-me/.github#2292 (esbuild override).

overrides:
  esbuild@>=0.17.0 <0.28.1: '>=0.28.1'
  fast-uri: '>=3.1.2'

Verification

• pnpm install regenerates lock with esbuild 0.28.1 and fast-uri 3.1.2
• pnpm-lock.yaml diff: 4 insertions
• No source code changes — only overrides + lockfile

Notes

This is a minimal security fix. No bulk dependency updates. Only the esbuild + fast-uri overrides were added to resolve the confirmed high-severity advisories.

#1463 should be closed in favor of this PR. Note that #1466 covers the separate vite HIGH/MODERATE alerts (#91, #92) and is independent.