[codex] Remediate esbuild alerts

[nahremenkova1]

Summary

• Add an npm override for esbuild 0.28.1 because tsup 8.5.1 still declares esbuild ^0.27.0.
• Regenerate package-lock.json so esbuild and @esbuild/* optional platform packages resolve to 0.28.1.
• Clears the high GHSA-gv7w-rqvm-qjhr and low GHSA-g7r4-m6w7-qqqr npm audit findings affecting dev tooling.

Validation

• npm audit --json
• npm ls esbuild tsup vitest vite --all --depth=4
• npm test
• npm run typecheck
• npm run build