feat(deps): upgrade upstream dependencies (#541)

Automated daily upgrade of upstream dependencies:
- rolldown (latest tag)
- rolldown-vite (latest tag)
- vitest (latest npm version)
- tsdown (latest npm version)

Build status: success

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Medium Risk**
> Dependency-only change, but it upgrades core build/bundling tooling
and a major `vue-router` version via lockfile updates, which can impact
builds and runtime behavior if consumed downstream.
> 
> **Overview**
> Updates bundled toolchain versions in `packages/core/package.json`
(notably `rolldown` `1.0.0-rc.2` → `1.0.0-rc.3` and `tsdown` `0.20.1` →
`0.20.2`) and advances the pinned `rolldown` upstream commit in
`packages/tools/.upstream-versions.json`.
> 
> Refreshes workspace/catalog versions and lockfiles (`pnpm-lock.yaml`,
`Cargo.lock`) to pull in newer `@oxc-project/*`/`oxc-*` (`0.111.0` →
`0.112.0`) and related transitive updates (e.g. `yaml` `2.8.1` →
`2.8.2`, `vue-router` `4.6.3` → `5.0.2`, plus new transitive packages).
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
cbbee2d. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

Author: Brooooooklyn

Cargo.lock

@@ -198,7 +198,7 @@
   },
   "bundledVersions": {
     "vite": "8.0.0-beta.12",
-    "rolldown": "1.0.0-rc.2",
-    "tsdown": "0.20.1"
+    "rolldown": "1.0.0-rc.3",
+    "tsdown": "0.20.2"
   }
 }

packages/core/package.json

@@ -2,7 +2,7 @@
   "rolldown": {
     "repo": "https://github.com/rolldown/rolldown.git",
     "branch": "main",
-    "hash": "10290d2b7729bc12cdaeddceba1f383b86873dc3"
+    "hash": "3035ec8774be955105decc387fd42c781793ccce"
   },
   "rolldown-vite": {
     "repo": "https://github.com/vitejs/vite.git",