chore(deps): resolve critical audit findings

Refresh Inngest's allowed OpenTelemetry dependency graph, pin patched protobufjs, and upgrade Vitest to 3.2.6 so the enforced critical audit gate passes.

Co-Authored-By: Claude <noreply@anthropic.com>

Author: devakone

apps/web/package.json

@@ -48,6 +48,6 @@
     "tw-animate-css": "^1.4.0",
     "typescript": "^5",
     "vite": "^7",
-    "vitest": "^3"
+    "vitest": "^3.2.6"
   }
 }