chore(deps): bump vite 8.0.3 -> 8.0.5 (security)

Fixes 3 dev server vulnerabilities:
- Path traversal in optimized deps .map handling
- Arbitrary file read via WebSocket
- server.fs.deny bypass with queries

Closes #274

cc

package.json

@@ -45,7 +45,7 @@
     "svelte": "^5.55.0",
     "svelte-check": "^4.4.6",
     "typescript": "~5.9.3",
-    "vite": "^8.0.3",
+    "vite": "^8.0.5",
     "vitest": "^4.1.2"
   },
   "overrides": {