Update dependencies with known OSV vulnerabilities

[ginny-code]

An OSV scan identified known vulnerabilities in the dependency graph. This issue
tracks the dependency updates needed to move affected packages to patched
versions.

The following vulnerable versions were identified in the pre-update lockfile:

Package	Vulnerable version	Highest severity	Updated version
vitest	3.2.4	Critical	3.2.6
drizzle-orm	0.45.1	High	0.45.2
sequelize	6.37.7	High	6.37.8
js-yaml	4.2.0	High	4.3.1
postcss	8.5.6	High	8.5.23
vite	7.2.4	High	7.3.5
turbo	2.6.1	Moderate	2.9.14

The scan also found a transitive js-yaml@3.14.2 instance with High and
Moderate findings. Refreshing the lockfile removes that older resolution.

The linked PR updates these direct dependencies and the associated lockfiles to
their patched versions.