fix(deps): regenerate web and vis lockfiles so npm ci succeeds in build

The react 19.2.7 / vite 8.0.16 bump left both lockfiles inconsistent:
they were missing the platform-specific optional @emnapi/* wasm-binding
deps (oxc-parser, oxc-resolver, rolldown). Because those are optional
per-OS deps, a partial `--package-lock-only` regen on one platform does
not capture the set CI's Linux runner needs, so `npm ci` kept failing
with EUSAGE ("package.json and package-lock.json are not in sync") and
broke `make build-web` / build-vis in the PyInstaller onefile jobs.

Regenerate both lockfiles from a clean install so they carry the full
cross-platform optional-dep tree. Direct deps are unchanged (react
19.2.7, vite 8.0.16, typescript 5.9.3); the churn is transitive/optional
ordering. Verified `npm ci` succeeds and `build-web`/`build-vis` produce
assets in both web/ and vis/.

Author: elkaix