fix(security): override esbuild >=0.28.1 (GHSA-gv7w-rqvm-qjhr, GHSA-g7r4-m6w7-qqqr)

[toolhive-studio-ci]

Summary

Adds a pnpm override to force esbuild to >=0.28.1, resolving two advisories (GHSA-gv7w-rqvm-qjhr — High, GHSA-g7r4-m6w7-qqqr — Low) in the build/test toolchain. esbuild is a dev-only transitive dependency with no production impact.

Changes

CVE	Package	Severity	Production	Action	Verified
GHSA-gv7w-rqvm-qjhr	esbuild 0.27.7 → 0.28.1	High	No	Override >=0.28.1	Pass
GHSA-g7r4-m6w7-qqqr	esbuild 0.27.7 → 0.28.1	Low	No	Override >=0.28.1	Pass

Files Modified

• pnpm-workspace.yaml: added esbuild: '>=0.28.1' override (alphabetical, between @xmldom/xmldom and fast-uri)
• pnpm-lock.yaml: regenerated — esbuild upgraded from 0.27.7 to 0.28.1

Verification

• pnpm audit --prod: Pass
• grype . --config .grype.yaml: Pass