fix: upgrade esbuild to 0.28.1 to resolve RCE [sc-163563]

[attest-dev-deploy]

This fix protects our development environments and CI/CD pipelines from remote code execution vulnerabilities by enforcing esbuild binary integrity.

Implements SC-163563

Changes

• Explicitly defined esbuild dependency at the root devDependencies using 0.28.1
• Overrode all transitive resolutions of esbuild to version 0.28.1 using pnpm.overrides in package.json
• Regenerated the lockfile to resolve all peer and optional dependencies of rolldown-vite and vitest with esbuild@0.28.1
• Updated the outdated snapshot in survey.test.ts