Open-RAIC v0.8.1 Dependency Security

Dependency security\n\n- upgrades Vitest, Vite, Undici, js-yaml, ECharts, Vercel Blob, and LangChain to patched compatible lines\n- constrains residual transitive advisories with documented temporary pnpm overrides\n- adds a low-threshold locked-dependency audit to CI and a weekly scheduled workflow\n- closes all 34 previously open Dependabot alerts\n\n## Compatibility\n\nThis release makes no public request, response, persistence, or capability behavior changes. Production capability reporting remains unchanged and truthful: web search, TTS, video, and MiroFish remain unavailable until separately configured and proven.\n\n## Verification\n\nNode 24.14 / pnpm 10.28 frozen install, zero dependency advisories, full unit/build/MiroFish/Playwright gates, benchmark budgets, canonical ops verification, protected preview, production health, and production smoke checks all pass.