[robingenz]

Fixes all npm audit findings (5 → 0). Minor/patch updates only.

• zod 4.0.17 → 4.6.7 (high: memory exhaustion when validating oversized constrained collections)
• vitest, @vitest/coverage-v8, @vitest/ui 4.1.11 → 4.1.12 (moderate, dev only: @vitest/mocker code injection and Windows path traversal)

Build, lint and tests (384) pass.

🤖 Generated with Claude Code

[Copilot]

🟢 Approval recommended

The dependency updates are internally consistent with no blocking issues identified; reported validation results were not independently rerun.

No open issues 🎉

What changed in this PR

Updates the CLI’s validation and test dependencies to address the reported npm audit vulnerabilities without changing application code.

Changes:

• Upgrades Zod from 4.0.17 to 4.6.7.
• Updates Vitest, its coverage provider, and UI to 4.1.12.
• Refreshes related transitive dependencies and lockfile integrity hashes.

File	Description
package.json	Updates Zod and Vitest dependency pins.
package-lock.json	Synchronizes dependency resolutions and related transitive updates.

_{Review effort: Balanced}