fix(security): override esbuild to 0.25.x (CVE in <= 0.24.2)

svelte-i18n pins esbuild ^0.19.2 which is vulnerable. Override to
0.25.x resolves dependabot alert #2. Build verified.

cc

package.json

@@ -48,6 +48,7 @@
     "vitest": "^4.1.2"
   },
   "overrides": {
-    "cookie": "^0.7.0"
+    "cookie": "^0.7.0",
+    "esbuild": "^0.25.0"
   }
 }