Clear development dependency alerts

[msinclair25]

Changes

• update Vitest from 4.1.10 to 4.1.11
• update Sharp override from 0.35.0 to 0.35.4
• refresh only the corresponding lockfile graph

Validation

• production and development audits: zero known vulnerabilities
• formatting, lint, types, policy, identity, and release checks passed
• 23 migration checks and 565 core tests passed
• every package suite and all 80 Playwright scenarios passed
• builds, Community and marketing deployment dry-runs, and public-source scan passed

Boundary

Development/build dependency maintenance only. No application code, durable schema, migration, authority, or production resource change.