fix(security): bump esbuild to >=0.28.1 to clear GHSA-gv7w-rqvm-qjhr and GHSA-g7r4-m6w7-qqqr (#333) (#334)

esbuild 0.27.7 is affected by GHSA-gv7w-rqvm-qjhr (high, CVSS 8.1) and
GHSA-g7r4-m6w7-qqqr (low, CVSS 2.5), failing the OSV dependency scan on
every PR. Bump the direct devDependency in cdk/package.json and add a
root resolution so the transitive copy pulled in by vite (docs
workspace) is also lifted to 0.28.1.

Closes #333

Author: scottschreckengaust

cdk/package.json

@@ -55,7 +55,7 @@
     "@typescript-eslint/eslint-plugin": "^8",
     "@typescript-eslint/parser": "^8",
     "aws-cdk": "^2",
-    "esbuild": "^0.27.4",
+    "esbuild": "^0.28.1",
     "eslint": "^10",
     "eslint-import-resolver-typescript": "^4",
     "eslint-plugin-import-x": "^4",