chore(deps): bump vitest 4.1.12, zod 4.6.7

Clears the open Dependabot alerts for @vitest/mocker (via vitest 4.1.12)
and zod (transitive, eslint-plugin-react-hooks). Both are dev-only.
The lockfile's root version also catches up with package.json (1.0.248).

package.json

@@ -83,7 +83,7 @@
     "tronweb": "^6.2.0",
     "typescript": "^5.5.3",
     "vite": "^6.4.4",
-    "vitest": "^4.1.11"
+    "vitest": "^4.1.12"
   },
   "engines": {
     "node": ">=18.0.0"