chore(deps): upgrade devDependencies and fix vulnerabilities

- Upgrade @typescript-eslint/parser to ^8.57.1
- Keep @github/local-action at ^7.0.1 (no downgrade)
- Keep prettier-eslint at ^16.4.2 (no downgrade)
- Sort devDependencies alphabetically
- Pin vitest and @vitest/coverage-v8 to ~4.0.x to avoid vite 8.x/rolldown
  native binding issues on CI (npm optional deps bug)
- Add overrides to fix transitive vulnerabilities:
  - minimatch >=9.0.7 (scoped to prettier-eslint) for ReDoS fixes
  - minimatch ^3.1.5 (scoped to @eslint/eslintrc) to preserve compatibility
  - undici >=6.24.0 <7 for HTTP smuggling/decompression fixes
- Rebuild dist/index.js

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: chrisreddington