npm audit: low-severity @babel/core advisory (GHSA-4x5r-pxfx-6jf8)

[CasperWA-ai-bot]

Summary

npm audit reports 1 low-severity vulnerability:

```
@babel/core <=7.29.0
@babel/core: Arbitrary File Read via sourceMappingURL Comment
GHSA-4x5r-pxfx-6jf8
node_modules/@babel/core
```

@babel/core is a transitive dev dependency (via @vitejs/plugin-react). Low severity, build-time only.

Context

Surfaced while validating the Vite 6→8 bump (PR #4). Not introduced by the bump — out of scope for that PR.

Suggested fix

Run npm audit fix, or let Dependabot bump the transitive @babel/core once a fixed release is available.