chore: resolve dev dependency audit findings (WealthLedger/frontend#103)

Bump storybook, vite, vitest and @vitest/* to patched versions, pin
transitive @vitest/* via overrides, and bump ip-address. npm audit
--include=dev now reports 0 vulnerabilities; the security job passes.

packages/ui/package.json

@@ -36,9 +36,9 @@
 		"@storybook/react-vite": "10.6.0",
 		"@testing-library/react": "16.3.3",
 		"@types/react": "19.3.0",
-		"storybook": "10.6.0",
+		"storybook": "10.6.3",
 		"typescript": "5.9.3",
-		"vite": "8.3.0",
-		"vitest": "5.0.0"
+		"vite": "8.3.5",
+		"vitest": "5.0.5"
 	}
 }