chore: update vulnerable deps

[marrouchi]

What changed?

• Updates vulnerable direct dependencies with targeted version bumps:
  • axios in CLI
  • vite in frontend/widget
  • sass in widget
  • @compodoc/compodoc in API
• Adds minimal pnpm overrides for vulnerable transitive packages where parent updates were unavailable or insufficient.
• Refreshes pnpm-lock.yaml through pnpm.