fix: remediate Socket dependency alerts

[Helweg]

Summary

Fix the Socket dependency alerts for the published v0.6.1 tree by repairing a corrupted lockfile entry and pinning the vulnerable transitive packages to patched versions.

Changes

• remove the malformed duplicate node_modules/js-yaml lockfile entry that was incorrectly marked as Linux-only and blocked npm lockfile regeneration on macOS
• add narrow overrides in package.json for @hono/node-server, hono, and vite so npm resolves the advisory chain to patched versions
• regenerate package-lock.json and sync the installed tree so npm audit returns zero vulnerabilities

Testing

How were these changes tested?

• Unit tests added/updated
• Manual testing performed
• Build passes (npm run build)
• Typecheck passes (npm run typecheck)
• Tests pass (npm run test:run)
• Lint passes (npm run lint)

Release Labels

• Added at least one release category label (feature, bug, performance, documentation, dependencies, refactor, test, chore, or skip-changelog)
• Added at most one semver label (semver:major, semver:minor, semver:patch) when needed

Related Issues

Fixes #0