chore: resolve Dependabot security alerts

[Baoyuantop]

Summary

• Bump direct vulnerable dependencies: axios, qs, and vite.
• Raise pnpm overrides for vulnerable transitive dependencies: lodash, lodash-es, brace-expansion, follow-redirects, js-cookie, postcss, and simple-git.
• Remove the unused @hookform/devtools dev dependency, which also removes the vulnerable uuid transitive dependency.

Why

This resolves the open Dependabot alerts for the npm dependency tree by moving every affected package to a patched version or removing the unused dependency path.

Verification

• pnpm audit
• pnpm build
• pnpm lint