Token Studio ROI v4.8.1

Patch release for npm one-command launch.\n\n- Fixes npx token-studio demo/start when npm hoists vite beside the package instead of inside token-studio/node_modules.\n- Adds runtime path tests for npx hoisted dependency layout and local source checkout layout.\n\nVerification:\n- npm test\n- npm run build\n- npm run privacy:check\n- node src/cli.mjs privacy-check --include-untracked\n- npm audit --audit-level=low\n- npm pack --dry-run