v0.1.0-rc.18

Pre-release cut from main (2 commits since rc.17).

Security

• Dev-toolchain dep patches: vite≥8.0.16, ws≥8.21.0 past HIGH advisories (GHSA-fx2h-pf6j-xcff, GHSA-96hv-2xvq-fx4p); clears the release-time audit gate (#819)

Changed

• Portfolio/visas mutation wire shapes verified live (#90)

Full notes: see CHANGELOG.md.