chore: #3591622 Update JS packages

Addresses several npm audit findings without running npm audit fix --force or applying broad major upgrades.

• Updated Vitest consumers to use vitest@^4.1.8.
• Updated @vitest/eslint-plugin to ^1.6.19.
• Added root vitest@^4.1.8 so the ESLint plugin resolves to the patched Vitest version.
• Updated UI uuid dependency to ^11.1.1.
• Added root uuid override to force vulnerable transitive copies to ^11.1.1.
• Added root qs override to force Cypress’ transitive qs dependency to ^6.15.2.

Closes #3591622 (closed). An AI coding agent was used for guidance, but the updates were done manually.