Bump esbuild ^0.25.0 → ^0.28.1 (security fix) (#1986)

## Summary
- Supersedes Dependabot #1982
- Bumps esbuild from `^0.25.0` to `^0.28.1` and regenerates the lockfile
- v0.28.1 fixes two security advisories:
[GHSA-g7r4-m6w7-qqqr](GHSA-g7r4-m6w7-qqqr)
(path traversal in local dev server) and
[GHSA-gv7w-rqvm-qjhr](GHSA-gv7w-rqvm-qjhr)
(Deno API integrity)

## Test plan
- [ ] `yarn tsc --noEmit` passes in `packages/databricks-vscode`
- [ ] `yarn install --immutable` passes (lockfile is consistent)
- [ ] CI passes

This pull request and its description were written by Isaac.

Co-authored-by: rugpanov <rugpanov@users.noreply.github.com>

Author: rugpanov

packages/databricks-vscode/package.json

@@ -1585,7 +1585,7 @@
         "@wdio/spec-reporter": "^9.29.0",
         "@wdio/types": "^9.29.0",
         "chai": "^4.3.10",
-        "esbuild": "^0.25.0",
+        "esbuild": "^0.28.1",
         "eslint": "^8.57.0",
         "eslint-plugin-local-rules": "^3.0.2",
         "extract-zip": "^2.0.1",