build(deps): bump vite, ws, js-yaml, esbuild, @babel/core in /frontend (#734)

* build(deps): bump vite, ws, js-yaml, esbuild, @babel/core in /frontend

Closes six Dependabot advisories that had no automated PR because all but
vite are transitive and not expressible as direct bumps:

  vite         7.3.1  -> 7.3.6   3 high
  ws           8.19.0 -> 8.21.3  1 high
  js-yaml      4.1.1  -> 4.3.0   1 high
  esbuild      0.27.3 -> 0.28.1  1 low
  @babel/core  7.29.0 -> 7.29.7  1 low

storybook moves 10.2.10 -> 10.5.7 as a prerequisite: 10.2.10 caps esbuild
at ^0.27.0, so 0.28.1 was unreachable until storybook widened the range.
That is within the declared ^10.2.10, so only the vite range changed in
package.json.

Verified with npm ci, vite build and tsc --noEmit.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

* fix(frontend): give action() story callbacks a void return

storybook 10.5.7 types action() as returning any, so the concise arrow
bodies tripped @typescript-eslint/no-unsafe-return. Wrapping the calls in
block bodies discards the return value and restores the void contract the
onSelect/onClick props expect.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>

frontend/package.json

@@ -91,7 +91,7 @@
     "tailwindcss": "^4.2.0",
     "typescript": "^5.9.3",
     "typescript-eslint": "^8.56.0",
-    "vite": "^7.3.1",
+    "vite": "^7.3.5",
     "vite-plugin-static-copy": "^3.2.0"
   },
   "overrides": {