Bump storybook, vite, vitest and @vitest/* to patched versions, pin transitive @vitest/* via overrides, and bump ip-address. npm audit --include=dev now reports 0 vulnerabilities; the security job passes.
OpenSpec change: evolve-frontend-stack