fix(deps): patch security vulnerabilities in pretext and vite

- Bump @chenglou/pretext ^0.0.3 → ^0.0.5 (fixes high-severity DoS via
  algorithmic complexity in text analysis)
- Bump vite ^5.0.0 → ^6.4.2 (fixes medium-severity path traversal in
  optimized deps .map handling)

Both packages build clean after the upgrades.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

packages/core/package.json

@@ -89,7 +89,7 @@
     "prepublishOnly": "echo skip"
   },
   "dependencies": {
-    "@chenglou/pretext": "^0.0.3"
+    "@chenglou/pretext": "^0.0.5"
   },
   "devDependencies": {
     "@types/jsdom": "^28.0.0",

packages/studio/package.json

@@ -51,7 +51,7 @@
     "puppeteer-core": "^24.40.0",
     "tailwindcss": "^3.4.0",
     "typescript": "^5.0.0",
-    "vite": "^5.0.0",
+    "vite": "^6.4.2",
     "vitest": "^3.2.4",
     "zustand": "^5.0.0"
   },