build(deps): bump vite to 6.4.5, qs to 6.16.1 and postcss-selector-parser to 6.1.5 (#67)

sign: vite 6.4.5 fixes GHSA-8g5g-mxqh-grgj (dev server fs.deny bypass,
6.4.4 only); qs 6.16.1 comes in through the url polyfill.
web: qs 6.16.1, and an override pins the postcss-selector-parser that
@tailwindcss/typography requires exactly (6.0.10) to 6.1.5, which fixes
GHSA-rj75-hqrm-r3gf.

sign/package.json

@@ -26,7 +26,7 @@
     "@types/react-dom": "^18.3.1",
     "@vitejs/plugin-react-swc": "^3.5.0",
     "typescript": "^5.6.3",
-    "vite": "^6.4.4",
+    "vite": "^6.4.5",
     "vite-plugin-node-polyfills": "^0.25.0"
   }
 }