fix: resolve dependency vulnerabilities and add minimumReleaseAge

Add overrides for smol-toml (>=1.6.1), vite (>=7.3.2), and
picomatch (>=4.0.4) to fix 8 audit vulnerabilities (4 high,
4 moderate). Create bunfig.toml with minimumReleaseAge=604800
(7 days) as supply chain attack mitigation.

https://claude.ai/code/session_01MyQde86BJvKTRRWRCumL5j

Author: claude