⬆️ Align Vite 8 and plugin-react 6 (#236)

## Why

`@vitejs/plugin-react@6` and `vite@8` are coupled now, so the original
split Dependabot PRs were each broken on their own. This PR turns `#236`
into the real upgrade branch by aligning the toolchain and carrying
forward the small stability fixes that kept the suite honest.

## What Changed

- bump `@vitejs/plugin-react` to `^6.0.1`
- bump `vite` to `^8.0.0`
- refresh `package-lock.json` for the combined toolchain
- preserve forced color output in the CLI color helpers
- harden SSE report updates so the covered test suite stays stable under
slower watcher behavior

## Test Plan

- `npm run lint`
- `npm test`
- `npm run build`
- CLI smoke checks via `npm run cli -- --help`, `npm run cli --
--version`, `npm run cli -- doctor`, `npm run cli -- config --json`, and
`--help` across the registered commands

## Notes

- `vizzly whoami` still fails against the current local setup because
the configured API URL is `http://localhost:3000` and no local API was
running during the smoke test.
- Vite 8 builds cleanly here. The build still shows existing Lightning
CSS warnings around `::highlight(...)` selectors.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Robert DeLuca <robertdeluca19@gmail.com>

Author: dependabot[bot]