chore(deps): refresh transitive dependencies

[steipete]

Summary

• refresh the lockfile to the latest transitive Vitest dependency graph
• update es-module-lexer from 2.3.0 to 2.3.1
• update obug from 2.1.3 to 2.1.4
• update tinyrainbow from 3.1.0 to 3.1.1
• record the maintenance refresh in the Unreleased changelog

Proof

• pnpm outdated --format json → {}
• pnpm typecheck
• pnpm lint
• pnpm format:check
• pnpm test → 29 files passed, 900 tests passed, 1 skipped
• pnpm build
• pnpm pack:smoke → packaged CLI smoke mapped 13 features (3 CUDA)
• npm pack --dry-run --json --ignore-scripts
• packed-artifact live run: version 0.7.2; init succeeded; map found 3 features; status reported 3 features; invalid command exited 2
• autoreview: clean, no accepted/actionable findings