fix(deps): re-lock @modelcontextprotocol/sdk, follow-redirects, launch-editor and vite onto their fixed releases

main's scheduled OSV scan matches 12 advisories (9 distinct ids) in four
locked packages, and every declared range on each path already admits the
fix, so this is a re-lock and adds no pin:

- @modelcontextprotocol/sdk 1.31.0 -> 1.32.1 (direct, ^1.30.1)
- follow-redirects 1.16.0 -> 1.16.1 (mongodb-memory-server-core ^1.16.0)
- launch-editor 2.14.1 -> 2.14.2 (@changesets/cli ^2.14.1)
- vite 8.0.16 -> 8.3.4 (vitest 4.1.11 ^6 || ^7 || ^8, fumadocs-mdx 7.x.x || 8.x.x)

vite's own closure moves with it (rolldown 1.0.3 -> 1.2.14 and its
bindings, @oxc-project/types), and the wasm32-wasi binding chain rolldown
1.2 no longer declares drops out. Nothing else moves. pnpm-workspace.yaml
is byte-identical to the base: the resolutions were taken with temporary
overrides that were removed before the second install.

Claude-Session: https://claude.ai/code/session_01FM29ZqLTrnPNXxijioZwMp
Co-authored-by: Claude <noreply@anthropic.com>

Author: claude