Update lodash, hono, @hono/node-server, and vite to close open advisories

[claytoncollie]

Supersedes #60. That Dependabot PR targeted versions from April that still carry open advisories, so this redoes the same four bumps against current releases.

Package	From	To
lodash	4.17.23	4.18.1
hono	4.12.7	4.13.5
@hono/node-server	1.19.11	1.19.17
vite	8.0.1	8.2.2

• package.json: lodash floor raised to ^4.18.1, matching Bump the npm_and_yarn group across 1 directory with 4 updates #60. No other range changes.
• package-lock.json: re-resolved the four packages. Vite's update also pulls current nanoid and postcss. No inBundle or peer changes.

Lint, format, typecheck, tests, and build pass locally with npm ci from this lockfile.

The remaining npm audit items sit under @getflywheel/local and @getflywheel/local-components and need a major SDK bump, which is out of scope here.

[github-actions]

Coverage Report

Status	Category	Percentage	Covered / Total
🟢	Lines	50.19% (🎯 40%)	263 / 524
🟢	Statements	49.9% (🎯 40%)	272 / 545
🟢	Functions	60.24% (🎯 40%)	50 / 83
🟢	Branches	41.35% (🎯 25%)	134 / 324

File Coverage

No changed files found.

Generated in workflow #30 for commit 91dc0c5 by the Vitest Coverage Report Action