fix(deps): patch TypeScript test dependencies

[SDAChess]

Summary

Patch the TypeScript SDK's development dependencies to address the Vitest advisory and the PostCSS and Nano ID advisories reported by npm audit. Limit the updates to the first patched versions, preserving all other locked package entries.

Related Issue

Addresses Dependabot alert 29 (GHSA-82fw-gwwq-j7x9), GHSA-fxqj-rqcc-2cmp (PostCSS), and GHSA-2v37-7h3g-55p8 (Nano ID).

The requesting maintainer explicitly waived a separate issue for these dependency updates.

Changes

• Raise the Vitest and coverage-v8 requirements from ^4.1.10 to ^4.1.11 and lock the nine Vitest packages to 4.1.11.
• Update transitive PostCSS from 8.5.19 to 8.5.23 and Nano ID from 3.3.16 to 3.3.18.
• Preserve every other locked package entry; no new dependencies.

Testing

Executed the sdk:ts:ci checks directly with Nix-provided Node 24.16.0 because mise attempted to install unrelated tools and failed during tool setup on NixOS.

• npm ci
• npm run gen and ./node_modules/.bin/buf lint ../..
• npm run lint and npm run typecheck
• npm test: 196 tests passed; 93.08% line coverage
• npm run build
• npm publish --dry-run (no publication)
• npm audit: 0 vulnerabilities
• Lockfile comparison confirms that only the nine Vitest packages, PostCSS, and Nano ID changed.
• No new unit or E2E tests: dependency-only fixes verified with the existing SDK suite.

Checklist

• Follows Conventional Commits
• Commits are signed off (DCO)
• Architecture docs: not applicable