Combine cirq-web dependabot updates (#8070)

- Bump the non-security group with 6 updates

  Updates `@types/node` from 25.5.0 to 25.6.0
  Updates `@vitest/coverage-v8` from 4.1.2 to 4.1.5
  Updates `puppeteer` from 24.40.0 to 24.42.0
  Updates `three` from 0.183.2 to 0.184.0
  Updates `@types/three` from 0.183.1 to 0.184.0
  Updates `vitest` from 4.1.2 to 4.1.5

- Bump jsdom from 28.1.0 to 29.1.1

- Bump vite from 7.3.1 to 8.0.10

- Bump postcss from 8.5.6 to 8.5.13

- Bump lodash from 4.17.23 to 4.18.1

- Bump vite from 7.3.1 to 7.3.2

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: pavoljuhas